{"vulnerability": "CVE-2026-4108", "sightings": [{"uuid": "dc4bc20b-8108-49c0-a586-e1b910e5e397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4108", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3minakyy7ft2v", "content": "", "creation_timestamp": "2026-04-04T03:00:15.054490Z"}, {"uuid": "e61b164f-7aff-4be5-bf89-bb084a7a5af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41080", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjmyvfwkt32r", "content": "", "creation_timestamp": "2026-04-16T18:08:06.664005Z"}, {"uuid": "dc508087-8205-4ad1-8f1c-cfe3612e3069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41082", "type": "published-proof-of-concept", "source": "Telegram/MfR_D7ll8pGcGi3RGemlsgII30sQ-Y2l5bpdSqMK2BdYlKE", "content": "", "creation_timestamp": "2026-04-17T05:18:08.000000Z"}, {"uuid": "4275119d-7942-4989-9f30-a9f40db6ad2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4108", "type": "seen", "source": "Telegram/QqwQTSXFRfWkuAVwlsaqg6mFQm4R2dirgmJdEmZNl5G-CtQ", "content": "", "creation_timestamp": "2026-04-03T13:19:23.000000Z"}, {"uuid": "ca5919f9-cb6e-42b9-8d67-50b6db2f892f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41080", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkfyhu6sds2h", "content": "", "creation_timestamp": "2026-04-26T16:37:07.145310Z"}, {"uuid": "77d9fcd5-1c06-46c8-8ce5-60a80a9b21dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41081", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkdr7v62tj25", "content": "", "creation_timestamp": "2026-04-25T19:22:01.169004Z"}, {"uuid": "8fb48233-a167-4b1e-b7ba-b38d94e0b29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116562942496836183", "content": "There is a new vulnerability with elevated criticality in Microsoft Windows (CVE-2026-41089) https://vuldb.com/vuln/363211", "creation_timestamp": "2026-05-12T18:09:16.445926Z"}, {"uuid": "34c46de4-637d-46f3-8603-764c38e70ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review", "content": "I\u2019m currently in Berlin helping set up for Pwn2Own Berlin, but that doesn\u2019t stop Patch Tuesday from coming, and it\u2019s another big one. At least nothing is listed as being in the wild \u2013 for now. Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. Due to technical difficulties, there will not be a video companion for this month.\nAdobe Patches for May 2026\nFor May, Adobe released 10 bulletins addressing 52 unique CVEs in Adobe Commerce, After Effects, Adobe Connect, Illustrator, Media Encoder, Premiere Pro, Substance 3D Painter, Substance 3D Sampler, Content Authenticity SDK, and the Adobe Substance 3D Designer. Here\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-49\n    Adobe Commerce\n    15\n    Critical\n    8.7\n    No\n    2\n  \n  \n    APSB26-48\n    Adobe After Effects\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-50\n    Adobe Connect\n    2\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-51\n    Adobe Illustrator\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-47\n    Adobe Media Encoder\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-46\n    Adobe Premiere Pro\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-55\n    Adobe Substance 3D Painter\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-54\n    Adobe Substance 3D Sampler\n    1\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-53\n    Content Authenticity SDK\n    14\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-52\n    Adobe Substance 3D Designer\n    5\n    Important\n    6.3\n    No\n    3\n  \n\n    TOTAL\n    10 bulletins\n    52\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nThe obvious priority this month is the patch for Commerce, with its 15 bugs and deployment priority of 2. The Connect fix should also rank up there since both of its CVEs are CVSS 9s. Beyond those, it\u2019s a pretty typical month for Adobe, with most of the bugs either being cross-site scripting (XSS) or open-and-own code executions.\nMicrosoft Patches for May 2026\nThis month, Microsoft released a whopping 138 new CVEs in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Copilot Chat, Github Copilot, M365 Copilot, SQL Server, TCP/IP, and the Telnet Client \u2013 yes, the Telnet client. Two of these bugs were reported through the TrendAI ZDI program. 30 of these bugs are rated Critical, three are rated as Moderate, one is rated Low, and the rest are rated Important in severity.\nThis large volume of fixes follows the largest monthly release in Microsoft\u2019s history and reflects the trend across the industry of a high number of submissions. While not all of these bugs were found by AI, it\u2019s likely they had an AI-related component \u2013 even if it was just AI writing the submission. I should also point out the Pwn2Own Berlin occurs in just a few days, and it\u2019s typical for vendors to patch as much as they can before the event.\nNone of the bugs patched by Microsoft this month are listed as publicly known or under active attack at the time of release, so we\u2019ve got that going for us. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with a nasty-looking bug in DNS:\n-    CVE-2026-41096 - Windows DNS Client Remote Code Execution VulnerabilityThis patch fixes a heap-based buffer overflow in the DNS Client triggered by a malicious DNS response. No authentication or user interaction needed, and since the DNS Client runs on virtually every Windows machine, the attack surface is enormous. An attacker with a position to influence DNS responses (MitM, rogue server) could achieve unauthenticated RCE across your enterprise.\n-    CVE-2026-41089 - Windows Netlogon Remote Code Execution VulnerabilityThis update covers another CVSS 9.8 bug, which is a stack-based buffer overflow that lets an unauthenticated remote attacker execute code on a domain controller by sending a specially crafted network request \u2014 no credentials, no user interaction required. Yup \u2013 that makes it wormable. This is the highest-impact bug that requires immediate patching: a compromised domain controller is a compromised domain.\n-    CVE-2026-42898 - Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityThis bug rates a CVSS 9.9(!) and represents a code injection in Dynamics 365. It allows any authenticated user to execute code with a scope change, meaning exploitation can break out and affect resources beyond the vulnerable component itself. Scope changes are pretty rare, so if you\u2019re running Dynamics 365 On-Prem, definitely test and deploy this patch quickly.\n-    CVE-2026-40415 - Windows TCP/IP Remote Code Execution VulnerabilityThis bug in the TCP/IP stack results from a use-after-free (UAF) and could allow a remote, unauthenticated threat actor to execute code without user interaction. That makes this another wormable bug. However, this one is much less likely to be exploited. The target needs to be under sustained low-memory (memory pressure) conditions, which is pretty rare. Still, no need to tempt fate here. Test and deploy this one quickly.\nHere\u2019s the full list of CVEs released by Microsoft for May 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"5\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  <span>CVE-2026-35435</span>\n  Azure AI Foundry\n  Elevation of Privilege Vulnerability\n  Critical\n  8.6\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35428</span>\n  Azure Cloud Shell\n  Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-42826</span>\n  Azure DevOps\n  Information Disclosure Vulnerability\n  Critical\n  10\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-32207</span>\n  Azure Machine Learning\n  Notebook Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-33109</span>\n  Azure Managed Instance\n  for Apache Cassandra Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33844</span>\n  Azure Managed Instance\n  for Apache Cassandra Remote Code Execution Vulnerability\n  Critical\n  9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41105</span>\n  Azure Monitor Action\n  Group Notification System Elevation of Privilege Vulnerability\n  Critical\n  8.1\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33111</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-26129</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-26164</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33821</span>\n  Microsoft Dynamics 365\n  Customer Insights Elevation of Privilege Vulnerability\n  Critical\n  7.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42898</span>\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40379</span>\n  Microsoft Enterprise\n  Security Token Service (ESTS) Spoofing Vulnerability\n  Critical\n  9.3\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40363</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40358</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-34327</span>\n  Microsoft Partner\n  Center Spoofing Vulnerability\n  Critical\n  8.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40365</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41103</span>\n  Microsoft SSO Plugin\n  for Jira & Confluence Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33823</span>\n  Microsoft Team Events\n  Portal Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40364</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40366</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40361</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40367</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42831</span>\n  Office for Android\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41096</span>\n  Windows DNS Client\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-35421</span>\n  Windows GDI Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40403</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40402</span>\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32161</span>\n  Windows Native WiFi\n  Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41089</span>\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-32175</span>\n  .NET Core Tampering\n  Vulnerability\n  Important\n  4.3\n  No\n  No\n  Tampering\n \n \n  <span>CVE-2026-32177</span>\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35433</span>\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2025-54518 *</span>\n  AMD: CVE-2025-54518\n  CPU OP Cache Corruption\n  Important\n  \n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42899</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40381</span>\n  Azure Connected\n  Machine Agent Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42823 \u2020</span>\n  Azure Logic Apps\n  Elevation of Privilege Vulnerability\n  Important\n  9.9\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33833</span>\n  Azure Machine Learning\n  Notebook Spoofing Vulnerability\n  Important\n  8.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-32204</span>\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42830</span>\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33117</span>\n  Azure SDK for Java\n  Security Feature Bypass Vulnerability\n  Important\n  9.1\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-41109</span>\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-35424</span>\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-41614</span>\n  M365 Copilot for\n  Desktop Spoofing Vulnerability\n  Important\n  6.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41100</span>\n  Microsoft 365 Copilot\n  for Android Spoofing Vulnerability\n  Important\n  4.4\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40377</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41094</span>\n  Microsoft Data\n  Formulator Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40417</span>\n  Microsoft Dynamics 365\n  Business Central Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42833</span>\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  9.1\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42838</span>\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  5.4\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40360</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40359</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40362</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42832</span>\n  Microsoft Excel\n  Spoofing Vulnerability\n  Important\n  7.7\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-34329</span>\n  Microsoft Message\n  Queuing (MSMQ) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40419</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40418</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35436</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40420</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42893</span>\n  Microsoft Outlook for\n  iOS Tampering Vulnerability\n  Important\n  7.4\n  No\n  No\n  Tampering\n \n \n  <span>CVE-2026-40374</span>\n  Microsoft Power\n  Automate Desktop Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41102</span>\n  Microsoft PowerPoint\n  for Android Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35439</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40368</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33110</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33112</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40357</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-32185</span>\n  Microsoft Teams\n  Spoofing Vulnerability\n  Important\n  5.5\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41101</span>\n  Microsoft Word for\n  Android Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35440</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40421</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41097</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  6.7\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-40370 \u2020</span>\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41613</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41612</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41611</span>\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41610</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  6.3\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-33839</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33840</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34330</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34331</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35423</span>\n  Windows 11 Telnet\n  Client Information Disclosure Vulnerability\n  Important\n  5.4\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-35438</span>\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41086</span>\n  Windows Admin Center\n  in Azure Portal Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34344</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34345</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35416</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41088</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34343</span>\n  Windows Application\n  Identity (AppID) Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35418</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33835</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34337</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40407</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40397</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42896</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35419</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-34336</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33834</span>\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32209</span>\n  Windows Filtering\n  Platform (WFP) Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-33841</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35420</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40369</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34332</span>\n  Windows Kernel-Mode\n  Driver Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-34339</span>\n  Windows Lightweight\n  Directory Access Protocol (LDAP) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-34341</span>\n  Windows Link-Layer\n  Discovery Protocol (LLDP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33838</span>\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34342</span>\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41095</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34340</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40398</span>\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-21530</span>\n  Windows Rich Text Edit\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32170</span>\n  Windows Rich Text Edit\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40410</span>\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35415</span>\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34350</span>\n  Windows Storport\n  Miniport Driver Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40405</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40414</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.4\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40401</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  6.2\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40413</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.4\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-35422</span>\n  Windows TCP/IP Driver\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-34351</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40399</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34334</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40406</span>\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33837</span>\n  Windows TCP/IP Local\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40415</span>\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42825</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34338</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40382</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40380</span>\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  6.2\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40408</span>\n  Windows WAN ARP Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34333</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34347</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35417</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42891</span>\n  Microsoft Edge\n  (Chromium-based) for Android Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35429</span>\n  Microsoft Edge\n  (Chromium-based) for Android Spoofing Vulnerability\n  Moderate\n  4.3\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41107</span>\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  7.4\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40416</span>\n  Microsoft\n  Edge (Chromium-based) for Android Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this month\u2019s release, there are quite a few scary-looking bugs (including a CVSS 10!), but there\u2019s no action for the end user as Microsoft has already mitigated these bugs and is just now documenting them. There\u2019s also this month\u2019s crop of Office bugs where the Preview Pane is an attack vector. However, the bug in Office for Android does not have the Preview Pane vector; it\u2019s simple open and own. The bug in the WiFi driver needs a network adjacent attacker. The SharePoint bug requires authentication, but anyone with site privileges has the authentication needed. The bug in SSO Plugin for Jira & Confluence should really be called an authentication bypass, since it allows an unauthenticated attacker to gain access to a system.\nLooking at the other code execution bugs, most are of the open and own variety as expected. The bug in Dynamic 365 (On Prem) requires high privileges. The Message Queueing bug requires an adjacent attacker. The bug in SQL Server requires authentication, but as usual, patching won\u2019t be straightforward. Finally, there\u2019s a bug in the kernel that leads to code execution. Most kernel bugs are privilege escalations, but this one could allow code execution if an attacker sends specially crafted NVMe over Fabrics (NVMe\u2011oF) response messages during the connection handshake process that contains an invalid header length value. Neat.\nAs usual, the vast majority of the Microsoft release fixes Elevation of Privilege (EoP) bugs. Also as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. There are also a few bugs that just state the attacker could \u201cgain ELEVATED privileges.\u201d How obtuse. The bugs in Azure allow an attacker to access data otherwise hidden from them. The Edge bug allows threat actors to elevate to the privileges of the running application. The bug in Visual Studio allows attackers to get permissions associated with the MCP Server\u2019s managed identity. Finally, there are a couple of sandbox escapes, too, which are always useful.\nThis month's update includes six Security Feature Bypass vulnerabilities. The most severe is in the Azure SDK for Java (CVSS 9.1). An attacker over the network can bypass the integrity protection provided by authentication tags on encrypted data, effectively manipulating encrypted input in a way that slips past integrity checks during decryption.  Close behind is the bypass affecting the GitHub Copilot integration in Visual Studio Code (CWE-74). This one requires a user interaction, but it allows an attacker to circumvent the path validation safeguards that normally control which files Copilot is permitted to modify. The other Visual Studio Code bypass involves cross-site scripting, improper link resolution, and information exposure triggered when a user opens or views a maliciously crafted notebook.  On the Windows networking side there are two bypasses. The first hits the Windows TCP/IP driver via an authentication bypass using an alternate channel. The other impacts the Windows Filtering Platform through improper access control, allowing a local, low-privileged attacker to bypass FQDN-based network security rules. Finally, there\u2019s a Secure Boot bypass that, you guessed it, bypasses secure boot features.\nMoving on to the Information Disclosure bugs fixed this month, we have 15 different CVEs. As usual, the majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The bug in Power Automate could expose data marked \u201cSensitive\u201d within Power Automate Desktop flows. One of the Word bugs could disclose NLTM hashes. The bug in Edge could disclose your cookies, which seems rude. The bug in Visual Studio could expose file path information. Finally, there\u2019s a bug in Telnet for Windows 11 that leaks information being used by Telnet at the time. I didn\u2019t even realize Windows 11 still had a telnet client.\nThe May release contains 10 spoofing bugs (plus the ones already addressed by Microsoft). The bug in Azure Machine Learning Notebooks vulnerability requires user interaction, but it could expose info through the Azure ML web interface to the attacker. There\u2019s a cluster of fixes for Microsoft's mobile Office suite on Android. Excel, Word, and PowerPoint for Android all carry spoofing flaws rooted in improper access control. Two Copilot products are also affected by spoofing vulns. The M365 Copilot for Desktop has no details provided. The M365 Copilot for Android variant requires low privileges and producing only limited impact on confidentiality and integrity. Microsoft Teams for Android rounds out the mobile app spoofing bugs. Three Edge bugs close things out, all involving misrepresentation of information in the browser UI. \nThere are two Tampering bugs in this month\u2019s release. The one in .NET Core allows threat actors to write files to an affected system. The other is in Outlook for iOS and manifests as a command injection bug.\nThere are eight DoS bugs in the May release, but as always, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting from a practical standpoint are two TCP/IP bugs that allow a low-privilege Hyper-V guest to crash the host. Both are triggered from the adjacent network. On the broader network-exposure side, the ASP.NET Core bug is a straightforward infinite loop condition \u2014 an unauthenticated attacker sends a crafted request over the network and the server stops responding.\nNo new advisories are being released this month.\nLooking Ahead\nAssuming I survive Pwn2Own Berlin (which is looking iffy at the moment), I\u2019ll return on June 9th on what will hopefully be a smaller release than this one. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-05-12T16:38:43.000000Z"}, {"uuid": "0f195672-d0e3-497c-86ab-4d612a7a5137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41086", "type": "seen", "source": "https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review", "content": "I\u2019m currently in Berlin helping set up for Pwn2Own Berlin, but that doesn\u2019t stop Patch Tuesday from coming, and it\u2019s another big one. At least nothing is listed as being in the wild \u2013 for now. Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. Due to technical difficulties, there will not be a video companion for this month.\nAdobe Patches for May 2026\nFor May, Adobe released 10 bulletins addressing 52 unique CVEs in Adobe Commerce, After Effects, Adobe Connect, Illustrator, Media Encoder, Premiere Pro, Substance 3D Painter, Substance 3D Sampler, Content Authenticity SDK, and the Adobe Substance 3D Designer. Here\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-49\n    Adobe Commerce\n    15\n    Critical\n    8.7\n    No\n    2\n  \n  \n    APSB26-48\n    Adobe After Effects\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-50\n    Adobe Connect\n    2\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-51\n    Adobe Illustrator\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-47\n    Adobe Media Encoder\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-46\n    Adobe Premiere Pro\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-55\n    Adobe Substance 3D Painter\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-54\n    Adobe Substance 3D Sampler\n    1\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-53\n    Content Authenticity SDK\n    14\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-52\n    Adobe Substance 3D Designer\n    5\n    Important\n    6.3\n    No\n    3\n  \n\n    TOTAL\n    10 bulletins\n    52\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nThe obvious priority this month is the patch for Commerce, with its 15 bugs and deployment priority of 2. The Connect fix should also rank up there since both of its CVEs are CVSS 9s. Beyond those, it\u2019s a pretty typical month for Adobe, with most of the bugs either being cross-site scripting (XSS) or open-and-own code executions.\nMicrosoft Patches for May 2026\nThis month, Microsoft released a whopping 138 new CVEs in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Copilot Chat, Github Copilot, M365 Copilot, SQL Server, TCP/IP, and the Telnet Client \u2013 yes, the Telnet client. Two of these bugs were reported through the TrendAI ZDI program. 30 of these bugs are rated Critical, three are rated as Moderate, one is rated Low, and the rest are rated Important in severity.\nThis large volume of fixes follows the largest monthly release in Microsoft\u2019s history and reflects the trend across the industry of a high number of submissions. While not all of these bugs were found by AI, it\u2019s likely they had an AI-related component \u2013 even if it was just AI writing the submission. I should also point out the Pwn2Own Berlin occurs in just a few days, and it\u2019s typical for vendors to patch as much as they can before the event.\nNone of the bugs patched by Microsoft this month are listed as publicly known or under active attack at the time of release, so we\u2019ve got that going for us. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with a nasty-looking bug in DNS:\n-    CVE-2026-41096 - Windows DNS Client Remote Code Execution VulnerabilityThis patch fixes a heap-based buffer overflow in the DNS Client triggered by a malicious DNS response. No authentication or user interaction needed, and since the DNS Client runs on virtually every Windows machine, the attack surface is enormous. An attacker with a position to influence DNS responses (MitM, rogue server) could achieve unauthenticated RCE across your enterprise.\n-    CVE-2026-41089 - Windows Netlogon Remote Code Execution VulnerabilityThis update covers another CVSS 9.8 bug, which is a stack-based buffer overflow that lets an unauthenticated remote attacker execute code on a domain controller by sending a specially crafted network request \u2014 no credentials, no user interaction required. Yup \u2013 that makes it wormable. This is the highest-impact bug that requires immediate patching: a compromised domain controller is a compromised domain.\n-    CVE-2026-42898 - Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityThis bug rates a CVSS 9.9(!) and represents a code injection in Dynamics 365. It allows any authenticated user to execute code with a scope change, meaning exploitation can break out and affect resources beyond the vulnerable component itself. Scope changes are pretty rare, so if you\u2019re running Dynamics 365 On-Prem, definitely test and deploy this patch quickly.\n-    CVE-2026-40415 - Windows TCP/IP Remote Code Execution VulnerabilityThis bug in the TCP/IP stack results from a use-after-free (UAF) and could allow a remote, unauthenticated threat actor to execute code without user interaction. That makes this another wormable bug. However, this one is much less likely to be exploited. The target needs to be under sustained low-memory (memory pressure) conditions, which is pretty rare. Still, no need to tempt fate here. Test and deploy this one quickly.\nHere\u2019s the full list of CVEs released by Microsoft for May 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"5\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  <span>CVE-2026-35435</span>\n  Azure AI Foundry\n  Elevation of Privilege Vulnerability\n  Critical\n  8.6\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35428</span>\n  Azure Cloud Shell\n  Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-42826</span>\n  Azure DevOps\n  Information Disclosure Vulnerability\n  Critical\n  10\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-32207</span>\n  Azure Machine Learning\n  Notebook Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-33109</span>\n  Azure Managed Instance\n  for Apache Cassandra Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33844</span>\n  Azure Managed Instance\n  for Apache Cassandra Remote Code Execution Vulnerability\n  Critical\n  9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41105</span>\n  Azure Monitor Action\n  Group Notification System Elevation of Privilege Vulnerability\n  Critical\n  8.1\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33111</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-26129</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-26164</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33821</span>\n  Microsoft Dynamics 365\n  Customer Insights Elevation of Privilege Vulnerability\n  Critical\n  7.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42898</span>\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40379</span>\n  Microsoft Enterprise\n  Security Token Service (ESTS) Spoofing Vulnerability\n  Critical\n  9.3\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40363</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40358</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-34327</span>\n  Microsoft Partner\n  Center Spoofing Vulnerability\n  Critical\n  8.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40365</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41103</span>\n  Microsoft SSO Plugin\n  for Jira & Confluence Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33823</span>\n  Microsoft Team Events\n  Portal Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40364</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40366</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40361</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40367</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42831</span>\n  Office for Android\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41096</span>\n  Windows DNS Client\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-35421</span>\n  Windows GDI Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40403</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40402</span>\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32161</span>\n  Windows Native WiFi\n  Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41089</span>\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-32175</span>\n  .NET Core Tampering\n  Vulnerability\n  Important\n  4.3\n  No\n  No\n  Tampering\n \n \n  <span>CVE-2026-32177</span>\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35433</span>\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2025-54518 *</span>\n  AMD: CVE-2025-54518\n  CPU OP Cache Corruption\n  Important\n  \n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42899</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40381</span>\n  Azure Connected\n  Machine Agent Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42823 \u2020</span>\n  Azure Logic Apps\n  Elevation of Privilege Vulnerability\n  Important\n  9.9\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33833</span>\n  Azure Machine Learning\n  Notebook Spoofing Vulnerability\n  Important\n  8.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-32204</span>\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42830</span>\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33117</span>\n  Azure SDK for Java\n  Security Feature Bypass Vulnerability\n  Important\n  9.1\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-41109</span>\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-35424</span>\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-41614</span>\n  M365 Copilot for\n  Desktop Spoofing Vulnerability\n  Important\n  6.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41100</span>\n  Microsoft 365 Copilot\n  for Android Spoofing Vulnerability\n  Important\n  4.4\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40377</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41094</span>\n  Microsoft Data\n  Formulator Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40417</span>\n  Microsoft Dynamics 365\n  Business Central Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42833</span>\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  9.1\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42838</span>\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  5.4\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40360</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40359</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40362</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42832</span>\n  Microsoft Excel\n  Spoofing Vulnerability\n  Important\n  7.7\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-34329</span>\n  Microsoft Message\n  Queuing (MSMQ) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40419</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40418</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35436</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40420</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42893</span>\n  Microsoft Outlook for\n  iOS Tampering Vulnerability\n  Important\n  7.4\n  No\n  No\n  Tampering\n \n \n  <span>CVE-2026-40374</span>\n  Microsoft Power\n  Automate Desktop Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41102</span>\n  Microsoft PowerPoint\n  for Android Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35439</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40368</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33110</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33112</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40357</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-32185</span>\n  Microsoft Teams\n  Spoofing Vulnerability\n  Important\n  5.5\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41101</span>\n  Microsoft Word for\n  Android Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35440</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40421</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41097</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  6.7\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-40370 \u2020</span>\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41613</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41612</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41611</span>\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41610</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  6.3\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-33839</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33840</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34330</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34331</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35423</span>\n  Windows 11 Telnet\n  Client Information Disclosure Vulnerability\n  Important\n  5.4\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-35438</span>\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41086</span>\n  Windows Admin Center\n  in Azure Portal Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34344</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34345</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35416</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41088</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34343</span>\n  Windows Application\n  Identity (AppID) Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35418</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33835</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34337</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40407</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40397</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42896</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35419</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-34336</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33834</span>\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32209</span>\n  Windows Filtering\n  Platform (WFP) Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-33841</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35420</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40369</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34332</span>\n  Windows Kernel-Mode\n  Driver Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-34339</span>\n  Windows Lightweight\n  Directory Access Protocol (LDAP) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-34341</span>\n  Windows Link-Layer\n  Discovery Protocol (LLDP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33838</span>\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34342</span>\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41095</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34340</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40398</span>\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-21530</span>\n  Windows Rich Text Edit\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32170</span>\n  Windows Rich Text Edit\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40410</span>\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35415</span>\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34350</span>\n  Windows Storport\n  Miniport Driver Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40405</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40414</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.4\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40401</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  6.2\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40413</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.4\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-35422</span>\n  Windows TCP/IP Driver\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-34351</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40399</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34334</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40406</span>\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33837</span>\n  Windows TCP/IP Local\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40415</span>\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42825</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34338</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40382</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40380</span>\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  6.2\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40408</span>\n  Windows WAN ARP Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34333</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34347</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35417</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42891</span>\n  Microsoft Edge\n  (Chromium-based) for Android Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35429</span>\n  Microsoft Edge\n  (Chromium-based) for Android Spoofing Vulnerability\n  Moderate\n  4.3\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41107</span>\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  7.4\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40416</span>\n  Microsoft\n  Edge (Chromium-based) for Android Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this month\u2019s release, there are quite a few scary-looking bugs (including a CVSS 10!), but there\u2019s no action for the end user as Microsoft has already mitigated these bugs and is just now documenting them. There\u2019s also this month\u2019s crop of Office bugs where the Preview Pane is an attack vector. However, the bug in Office for Android does not have the Preview Pane vector; it\u2019s simple open and own. The bug in the WiFi driver needs a network adjacent attacker. The SharePoint bug requires authentication, but anyone with site privileges has the authentication needed. The bug in SSO Plugin for Jira & Confluence should really be called an authentication bypass, since it allows an unauthenticated attacker to gain access to a system.\nLooking at the other code execution bugs, most are of the open and own variety as expected. The bug in Dynamic 365 (On Prem) requires high privileges. The Message Queueing bug requires an adjacent attacker. The bug in SQL Server requires authentication, but as usual, patching won\u2019t be straightforward. Finally, there\u2019s a bug in the kernel that leads to code execution. Most kernel bugs are privilege escalations, but this one could allow code execution if an attacker sends specially crafted NVMe over Fabrics (NVMe\u2011oF) response messages during the connection handshake process that contains an invalid header length value. Neat.\nAs usual, the vast majority of the Microsoft release fixes Elevation of Privilege (EoP) bugs. Also as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. There are also a few bugs that just state the attacker could \u201cgain ELEVATED privileges.\u201d How obtuse. The bugs in Azure allow an attacker to access data otherwise hidden from them. The Edge bug allows threat actors to elevate to the privileges of the running application. The bug in Visual Studio allows attackers to get permissions associated with the MCP Server\u2019s managed identity. Finally, there are a couple of sandbox escapes, too, which are always useful.\nThis month's update includes six Security Feature Bypass vulnerabilities. The most severe is in the Azure SDK for Java (CVSS 9.1). An attacker over the network can bypass the integrity protection provided by authentication tags on encrypted data, effectively manipulating encrypted input in a way that slips past integrity checks during decryption.  Close behind is the bypass affecting the GitHub Copilot integration in Visual Studio Code (CWE-74). This one requires a user interaction, but it allows an attacker to circumvent the path validation safeguards that normally control which files Copilot is permitted to modify. The other Visual Studio Code bypass involves cross-site scripting, improper link resolution, and information exposure triggered when a user opens or views a maliciously crafted notebook.  On the Windows networking side there are two bypasses. The first hits the Windows TCP/IP driver via an authentication bypass using an alternate channel. The other impacts the Windows Filtering Platform through improper access control, allowing a local, low-privileged attacker to bypass FQDN-based network security rules. Finally, there\u2019s a Secure Boot bypass that, you guessed it, bypasses secure boot features.\nMoving on to the Information Disclosure bugs fixed this month, we have 15 different CVEs. As usual, the majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The bug in Power Automate could expose data marked \u201cSensitive\u201d within Power Automate Desktop flows. One of the Word bugs could disclose NLTM hashes. The bug in Edge could disclose your cookies, which seems rude. The bug in Visual Studio could expose file path information. Finally, there\u2019s a bug in Telnet for Windows 11 that leaks information being used by Telnet at the time. I didn\u2019t even realize Windows 11 still had a telnet client.\nThe May release contains 10 spoofing bugs (plus the ones already addressed by Microsoft). The bug in Azure Machine Learning Notebooks vulnerability requires user interaction, but it could expose info through the Azure ML web interface to the attacker. There\u2019s a cluster of fixes for Microsoft's mobile Office suite on Android. Excel, Word, and PowerPoint for Android all carry spoofing flaws rooted in improper access control. Two Copilot products are also affected by spoofing vulns. The M365 Copilot for Desktop has no details provided. The M365 Copilot for Android variant requires low privileges and producing only limited impact on confidentiality and integrity. Microsoft Teams for Android rounds out the mobile app spoofing bugs. Three Edge bugs close things out, all involving misrepresentation of information in the browser UI. \nThere are two Tampering bugs in this month\u2019s release. The one in .NET Core allows threat actors to write files to an affected system. The other is in Outlook for iOS and manifests as a command injection bug.\nThere are eight DoS bugs in the May release, but as always, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting from a practical standpoint are two TCP/IP bugs that allow a low-privilege Hyper-V guest to crash the host. Both are triggered from the adjacent network. On the broader network-exposure side, the ASP.NET Core bug is a straightforward infinite loop condition \u2014 an unauthenticated attacker sends a crafted request over the network and the server stops responding.\nNo new advisories are being released this month.\nLooking Ahead\nAssuming I survive Pwn2Own Berlin (which is looking iffy at the moment), I\u2019ll return on June 9th on what will hopefully be a smaller release than this one. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-05-12T16:38:43.000000Z"}, {"uuid": "5291f720-c670-4481-b426-6f2b4facc401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41088", "type": "seen", "source": "https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review", "content": "I\u2019m currently in Berlin helping set up for Pwn2Own Berlin, but that doesn\u2019t stop Patch Tuesday from coming, and it\u2019s another big one. At least nothing is listed as being in the wild \u2013 for now. Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. Due to technical difficulties, there will not be a video companion for this month.\nAdobe Patches for May 2026\nFor May, Adobe released 10 bulletins addressing 52 unique CVEs in Adobe Commerce, After Effects, Adobe Connect, Illustrator, Media Encoder, Premiere Pro, Substance 3D Painter, Substance 3D Sampler, Content Authenticity SDK, and the Adobe Substance 3D Designer. Here\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-49\n    Adobe Commerce\n    15\n    Critical\n    8.7\n    No\n    2\n  \n  \n    APSB26-48\n    Adobe After Effects\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-50\n    Adobe Connect\n    2\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-51\n    Adobe Illustrator\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-47\n    Adobe Media Encoder\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-46\n    Adobe Premiere Pro\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-55\n    Adobe Substance 3D Painter\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-54\n    Adobe Substance 3D Sampler\n    1\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-53\n    Content Authenticity SDK\n    14\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-52\n    Adobe Substance 3D Designer\n    5\n    Important\n    6.3\n    No\n    3\n  \n\n    TOTAL\n    10 bulletins\n    52\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nThe obvious priority this month is the patch for Commerce, with its 15 bugs and deployment priority of 2. The Connect fix should also rank up there since both of its CVEs are CVSS 9s. Beyond those, it\u2019s a pretty typical month for Adobe, with most of the bugs either being cross-site scripting (XSS) or open-and-own code executions.\nMicrosoft Patches for May 2026\nThis month, Microsoft released a whopping 138 new CVEs in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Copilot Chat, Github Copilot, M365 Copilot, SQL Server, TCP/IP, and the Telnet Client \u2013 yes, the Telnet client. Two of these bugs were reported through the TrendAI ZDI program. 30 of these bugs are rated Critical, three are rated as Moderate, one is rated Low, and the rest are rated Important in severity.\nThis large volume of fixes follows the largest monthly release in Microsoft\u2019s history and reflects the trend across the industry of a high number of submissions. While not all of these bugs were found by AI, it\u2019s likely they had an AI-related component \u2013 even if it was just AI writing the submission. I should also point out the Pwn2Own Berlin occurs in just a few days, and it\u2019s typical for vendors to patch as much as they can before the event.\nNone of the bugs patched by Microsoft this month are listed as publicly known or under active attack at the time of release, so we\u2019ve got that going for us. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with a nasty-looking bug in DNS:\n-    CVE-2026-41096 - Windows DNS Client Remote Code Execution VulnerabilityThis patch fixes a heap-based buffer overflow in the DNS Client triggered by a malicious DNS response. No authentication or user interaction needed, and since the DNS Client runs on virtually every Windows machine, the attack surface is enormous. An attacker with a position to influence DNS responses (MitM, rogue server) could achieve unauthenticated RCE across your enterprise.\n-    CVE-2026-41089 - Windows Netlogon Remote Code Execution VulnerabilityThis update covers another CVSS 9.8 bug, which is a stack-based buffer overflow that lets an unauthenticated remote attacker execute code on a domain controller by sending a specially crafted network request \u2014 no credentials, no user interaction required. Yup \u2013 that makes it wormable. This is the highest-impact bug that requires immediate patching: a compromised domain controller is a compromised domain.\n-    CVE-2026-42898 - Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityThis bug rates a CVSS 9.9(!) and represents a code injection in Dynamics 365. It allows any authenticated user to execute code with a scope change, meaning exploitation can break out and affect resources beyond the vulnerable component itself. Scope changes are pretty rare, so if you\u2019re running Dynamics 365 On-Prem, definitely test and deploy this patch quickly.\n-    CVE-2026-40415 - Windows TCP/IP Remote Code Execution VulnerabilityThis bug in the TCP/IP stack results from a use-after-free (UAF) and could allow a remote, unauthenticated threat actor to execute code without user interaction. That makes this another wormable bug. However, this one is much less likely to be exploited. The target needs to be under sustained low-memory (memory pressure) conditions, which is pretty rare. Still, no need to tempt fate here. Test and deploy this one quickly.\nHere\u2019s the full list of CVEs released by Microsoft for May 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"5\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  <span>CVE-2026-35435</span>\n  Azure AI Foundry\n  Elevation of Privilege Vulnerability\n  Critical\n  8.6\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35428</span>\n  Azure Cloud Shell\n  Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-42826</span>\n  Azure DevOps\n  Information Disclosure Vulnerability\n  Critical\n  10\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-32207</span>\n  Azure Machine Learning\n  Notebook Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-33109</span>\n  Azure Managed Instance\n  for Apache Cassandra Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33844</span>\n  Azure Managed Instance\n  for Apache Cassandra Remote Code Execution Vulnerability\n  Critical\n  9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41105</span>\n  Azure Monitor Action\n  Group Notification System Elevation of Privilege Vulnerability\n  Critical\n  8.1\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33111</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-26129</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-26164</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33821</span>\n  Microsoft Dynamics 365\n  Customer Insights Elevation of Privilege Vulnerability\n  Critical\n  7.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42898</span>\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40379</span>\n  Microsoft Enterprise\n  Security Token Service (ESTS) Spoofing Vulnerability\n  Critical\n  9.3\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40363</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40358</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-34327</span>\n  Microsoft Partner\n  Center Spoofing Vulnerability\n  Critical\n  8.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40365</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41103</span>\n  Microsoft SSO Plugin\n  for Jira & Confluence Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33823</span>\n  Microsoft Team Events\n  Portal Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40364</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40366</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40361</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40367</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42831</span>\n  Office for Android\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41096</span>\n  Windows DNS Client\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-35421</span>\n  Windows GDI Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40403</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40402</span>\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32161</span>\n  Windows Native WiFi\n  Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41089</span>\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-32175</span>\n  .NET Core Tampering\n  Vulnerability\n  Important\n  4.3\n  No\n  No\n  Tampering\n \n \n  <span>CVE-2026-32177</span>\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35433</span>\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2025-54518 *</span>\n  AMD: CVE-2025-54518\n  CPU OP Cache Corruption\n  Important\n  \n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42899</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40381</span>\n  Azure Connected\n  Machine Agent Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42823 \u2020</span>\n  Azure Logic Apps\n  Elevation of Privilege Vulnerability\n  Important\n  9.9\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33833</span>\n  Azure Machine Learning\n  Notebook Spoofing Vulnerability\n  Important\n  8.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-32204</span>\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42830</span>\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33117</span>\n  Azure SDK for Java\n  Security Feature Bypass Vulnerability\n  Important\n  9.1\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-41109</span>\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-35424</span>\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-41614</span>\n  M365 Copilot for\n  Desktop Spoofing Vulnerability\n  Important\n  6.2\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41100</span>\n  Microsoft 365 Copilot\n  for Android Spoofing Vulnerability\n  Important\n  4.4\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-40377</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41094</span>\n  Microsoft Data\n  Formulator Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40417</span>\n  Microsoft Dynamics 365\n  Business Central Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42833</span>\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  9.1\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42838</span>\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  5.4\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40360</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40359</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40362</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42832</span>\n  Microsoft Excel\n  Spoofing Vulnerability\n  Important\n  7.7\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-34329</span>\n  Microsoft Message\n  Queuing (MSMQ) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40419</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40418</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35436</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40420</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42893</span>\n  Microsoft Outlook for\n  iOS Tampering Vulnerability\n  Important\n  7.4\n  No\n  No\n  Tampering\n \n \n  <span>CVE-2026-40374</span>\n  Microsoft Power\n  Automate Desktop Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41102</span>\n  Microsoft PowerPoint\n  for Android Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35439</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40368</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33110</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-33112</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40357</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-32185</span>\n  Microsoft Teams\n  Spoofing Vulnerability\n  Important\n  5.5\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41101</span>\n  Microsoft Word for\n  Android Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35440</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40421</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41097</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  6.7\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-40370 \u2020</span>\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41613</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41612</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-41611</span>\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-41610</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  6.3\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-33839</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33840</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34330</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34331</span>\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35423</span>\n  Windows 11 Telnet\n  Client Information Disclosure Vulnerability\n  Important\n  5.4\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-35438</span>\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41086</span>\n  Windows Admin Center\n  in Azure Portal Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34344</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34345</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35416</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41088</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34343</span>\n  Windows Application\n  Identity (AppID) Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35418</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33835</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34337</span>\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40407</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40397</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42896</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35419</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-34336</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33834</span>\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32209</span>\n  Windows Filtering\n  Platform (WFP) Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-33841</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35420</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40369</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34332</span>\n  Windows Kernel-Mode\n  Driver Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-34339</span>\n  Windows Lightweight\n  Directory Access Protocol (LDAP) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-34341</span>\n  Windows Link-Layer\n  Discovery Protocol (LLDP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-33838</span>\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34342</span>\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-41095</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34340</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40398</span>\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-21530</span>\n  Windows Rich Text Edit\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-32170</span>\n  Windows Rich Text Edit\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40410</span>\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35415</span>\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34350</span>\n  Windows Storport\n  Miniport Driver Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40405</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40414</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.4\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40401</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  6.2\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-40413</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.4\n  No\n  No\n  DoS\n \n \n  <span>CVE-2026-35422</span>\n  Windows TCP/IP Driver\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  <span>CVE-2026-34351</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40399</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34334</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40406</span>\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-33837</span>\n  Windows TCP/IP Local\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40415</span>\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-42825</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34338</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40382</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-40380</span>\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  6.2\n  No\n  No\n  RCE\n \n \n  <span>CVE-2026-40408</span>\n  Windows WAN ARP Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34333</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-34347</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-35417</span>\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  <span>CVE-2026-42891</span>\n  Microsoft Edge\n  (Chromium-based) for Android Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-35429</span>\n  Microsoft Edge\n  (Chromium-based) for Android Spoofing Vulnerability\n  Moderate\n  4.3\n  No\n  No\n  Spoofing\n \n \n  <span>CVE-2026-41107</span>\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  7.4\n  No\n  No\n  Info\n \n \n  <span>CVE-2026-40416</span>\n  Microsoft\n  Edge (Chromium-based) for Android Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this month\u2019s release, there are quite a few scary-looking bugs (including a CVSS 10!), but there\u2019s no action for the end user as Microsoft has already mitigated these bugs and is just now documenting them. There\u2019s also this month\u2019s crop of Office bugs where the Preview Pane is an attack vector. However, the bug in Office for Android does not have the Preview Pane vector; it\u2019s simple open and own. The bug in the WiFi driver needs a network adjacent attacker. The SharePoint bug requires authentication, but anyone with site privileges has the authentication needed. The bug in SSO Plugin for Jira & Confluence should really be called an authentication bypass, since it allows an unauthenticated attacker to gain access to a system.\nLooking at the other code execution bugs, most are of the open and own variety as expected. The bug in Dynamic 365 (On Prem) requires high privileges. The Message Queueing bug requires an adjacent attacker. The bug in SQL Server requires authentication, but as usual, patching won\u2019t be straightforward. Finally, there\u2019s a bug in the kernel that leads to code execution. Most kernel bugs are privilege escalations, but this one could allow code execution if an attacker sends specially crafted NVMe over Fabrics (NVMe\u2011oF) response messages during the connection handshake process that contains an invalid header length value. Neat.\nAs usual, the vast majority of the Microsoft release fixes Elevation of Privilege (EoP) bugs. Also as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. There are also a few bugs that just state the attacker could \u201cgain ELEVATED privileges.\u201d How obtuse. The bugs in Azure allow an attacker to access data otherwise hidden from them. The Edge bug allows threat actors to elevate to the privileges of the running application. The bug in Visual Studio allows attackers to get permissions associated with the MCP Server\u2019s managed identity. Finally, there are a couple of sandbox escapes, too, which are always useful.\nThis month's update includes six Security Feature Bypass vulnerabilities. The most severe is in the Azure SDK for Java (CVSS 9.1). An attacker over the network can bypass the integrity protection provided by authentication tags on encrypted data, effectively manipulating encrypted input in a way that slips past integrity checks during decryption.  Close behind is the bypass affecting the GitHub Copilot integration in Visual Studio Code (CWE-74). This one requires a user interaction, but it allows an attacker to circumvent the path validation safeguards that normally control which files Copilot is permitted to modify. The other Visual Studio Code bypass involves cross-site scripting, improper link resolution, and information exposure triggered when a user opens or views a maliciously crafted notebook.  On the Windows networking side there are two bypasses. The first hits the Windows TCP/IP driver via an authentication bypass using an alternate channel. The other impacts the Windows Filtering Platform through improper access control, allowing a local, low-privileged attacker to bypass FQDN-based network security rules. Finally, there\u2019s a Secure Boot bypass that, you guessed it, bypasses secure boot features.\nMoving on to the Information Disclosure bugs fixed this month, we have 15 different CVEs. As usual, the majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The bug in Power Automate could expose data marked \u201cSensitive\u201d within Power Automate Desktop flows. One of the Word bugs could disclose NLTM hashes. The bug in Edge could disclose your cookies, which seems rude. The bug in Visual Studio could expose file path information. Finally, there\u2019s a bug in Telnet for Windows 11 that leaks information being used by Telnet at the time. I didn\u2019t even realize Windows 11 still had a telnet client.\nThe May release contains 10 spoofing bugs (plus the ones already addressed by Microsoft). The bug in Azure Machine Learning Notebooks vulnerability requires user interaction, but it could expose info through the Azure ML web interface to the attacker. There\u2019s a cluster of fixes for Microsoft's mobile Office suite on Android. Excel, Word, and PowerPoint for Android all carry spoofing flaws rooted in improper access control. Two Copilot products are also affected by spoofing vulns. The M365 Copilot for Desktop has no details provided. The M365 Copilot for Android variant requires low privileges and producing only limited impact on confidentiality and integrity. Microsoft Teams for Android rounds out the mobile app spoofing bugs. Three Edge bugs close things out, all involving misrepresentation of information in the browser UI. \nThere are two Tampering bugs in this month\u2019s release. The one in .NET Core allows threat actors to write files to an affected system. The other is in Outlook for iOS and manifests as a command injection bug.\nThere are eight DoS bugs in the May release, but as always, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting from a practical standpoint are two TCP/IP bugs that allow a low-privilege Hyper-V guest to crash the host. Both are triggered from the adjacent network. On the broader network-exposure side, the ASP.NET Core bug is a straightforward infinite loop condition \u2014 an unauthenticated attacker sends a crafted request over the network and the server stops responding.\nNo new advisories are being released this month.\nLooking Ahead\nAssuming I survive Pwn2Own Berlin (which is looking iffy at the moment), I\u2019ll return on June 9th on what will hopefully be a smaller release than this one. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-05-12T16:38:43.000000Z"}, {"uuid": "27a11593-224e-4703-8ad8-0aeafe9cb710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://nsm.no/fagomrader/digital-sikkerhet/nasjonalt-cybersikkerhetssenter/varsler-fra-nsm/microsoft-patchetirsdag-mai", "content": "", "creation_timestamp": "2026-05-12T11:57:43.000000Z"}, {"uuid": "365f8f20-b4fc-418b-8508-d3a72ce43e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mlos6tmf6627", "content": "Microsoft's May 2026 Patch Tuesday addresses 120 vulnerabilities, including 29 critical remote code execution (RCE) flaws across various products like Windows, Office, and Azure. Notable CVEs include CVE-2026-41096 (Windows DNS Client) and CVE-2026-41089 (Netlogon).", "creation_timestamp": "2026-05-12T22:03:52.459165Z"}, {"uuid": "b158c626-0f00-466f-a984-60706455d3d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://krebsonsecurity.com/2026/05/patch-tuesday-may-2026-edition/", "content": "Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers — including Apple, Google, Microsoft, Mozilla and Oracle — fixing near record volumes of security bugs, and/or quickening the tempo of their patch releases.\n\nAs it does on the second Tuesday of every month, Microsoft today released software updates to address at least 118 security vulnerabilities in its various Windows operating systems and other products. Remarkably, this is the first Patch Tuesday in nearly two years that Microsoft is not shipping any fixes to deal with emergency zero-day flaws that are already being exploited. Nor have any of the flaws fixed today been previously disclosed (potentially giving attackers a heads up in how to exploit the weakness).\n\nSixteen of the vulnerabilities earned Microsoft’s most-dire “critical” label, meaning malware or miscreants could abuse these bugs to seize remote control over a vulnerable Windows device with little or no help from the user. Rapid7 has done much of the heavy lifting in identifying some of the more concerning critical weaknesses this month, including:<span id=\"more-73582\"></span>\n\n\n\nCVE-2026-41089: A critical stack-based buffer overflow in Windows Netlogon that offers an attacker SYSTEM privileges on the domain controller. No privileges or user interaction are required, and attack complexity is low. Patches are available for all versions of Windows Server from 2012 onwards.\n\nCVE-2026-41096: A critical RCE in the Windows DNS client implementation worthy of attention despite Microsoft assessing exploitation as less likely.\n\nCVE-2026-41103: A critical elevation of privilege vulnerability that allows an unauthorized attacker to impersonate an existing user by presenting forged credentials, thus bypassing Entra ID. Microsoft expects that exploitation is more likely.\n\n\nMay’s Patch Tuesday is a welcome respite from April, which saw Microsoft fix a near-record 167 security flaws. Microsoft was among a few dozen tech giants given access to a “Project Glasswing,” a much-hyped AI capability developed by Anthropic that appears quite effective at unearthing security vulnerabilities in code.\n\nApple, another early participant in Project Glasswing, typically fixes an average of 20 vulnerabilities each time it ships a security update for iOS devices, said Chris Goettl, vice president of product management at Ivanti. On May 11, Apple shipped iOS 15, which addressed at least 52 vulnerabilities and backported the changes all the way to iPhone 6s and iOS 15.\n\nLast month, Mozilla released Firefox 150, which resolved a whopping 271 vulnerabilities that were reportedly discovered during the Glasswing evaluation.\n\n“Since Firefox 150.0.0 released, they have been on a more aggressive weekly cadence for security updates including the release of Firefox 150.0.3 on May Patch Tuesday resolving between three to five CVEs in each release,” Goettl said.\n\nThe software giant Oracle likewise recently increased its patch pace in response to their work with Glasswing. In its most recent quarterly patch update, Oracle addressed at least 450 flaws, including more than 300 fixes for remotely exploitable, unauthenticated flaws. But at the end of April, Oracle announced it was switching to a monthly update cycle for critical security issues.\n\nOn May 8, Google started rolling out updates to its Chrome browser that fixed an astonishing 127 security flaws (up from just 30 the previous month). Chrome automagically downloads available security updates, but installing them requires fully restarting the browser.\n\nIf you encounter any weirdness applying the updates from Microsoft or any other vendor mentioned here, feel free to sound off in the comments below. Meantime, if you haven’t backed up your data and/or drive lately, doing that before updating is generally sound advice. For a more granular look at the Microsoft updates released today, checkout this inventory by the SANS Internet Storm Center.", "creation_timestamp": "2026-05-12T19:46:45.000000Z"}, {"uuid": "fc5beb89-6670-4e08-9fa4-eca4e3280115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41086", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0142", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en mogelijk daarmee toegang te krijgen tot gevoelige gegevens.\n\nDe kwetsbaarheden met kenmerk CVE-2026-40379, CVE-2026-32207, CVE-2026-33109, CVE-2026-33844, CVE-2026-34327, CVE-2026-35428, CVE-2026-35435 en CVE-2026-41105 zijn reeds centraal verholpen door Microsoft en slechts opgenomen ter informatie. Voor deze kwetsbaarheden zijn geen acties benodigd.\n\n```\nAzure Machine Learning: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32207 | 8.80 | Voordoen als andere gebruiker       | \n| CVE-2026-33833 | 8.20 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32204 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42830 | 6.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Partner Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34327 | 8.20 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Connected Machine Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40381 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33117 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft SSO Plugin for Jira & Confluence: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41103 | 9.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Notification Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41105 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42823 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40379 | 9.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41086 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure AI Foundry M365 published agents: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35435 | 8.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Cloud Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35428 | 9.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Managed Instance for Apache Cassandra: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33109 | 9.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-33844 | 9.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-05-12T15:53:04.000000Z"}, {"uuid": "0093fb9c-31fd-46ed-8092-350927a8f5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/kasperskyb2b/2166", "content": "\ud83d\udcbb \u041c\u0430\u0439\u0441\u043a\u0438\u0439 Patch Tuesday: 118 \u0431\u0430\u0433\u043e\u0432, \u043d\u043e \u0431\u0435\u0437 \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u0432\n\n\u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0440\u0430\u0437\u0440\u043e\u0434\u0438\u043b\u0441\u044f \u0432 \u043c\u0430\u0435 \u0441\u043e\u043b\u0438\u0434\u043d\u044b\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043d\u043e \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441 \u043b\u0435\u0442\u0430 2024 \u0433\u043e\u0434\u0430 \u043d\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0445 \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f. \n\n16 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445, 14 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE, \u0430 2 \u2014 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441\u0442\u0430\u043b\u043e \u0441\u0430\u043c\u043e\u0439 \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0439 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0435\u0439, 57 \u0431\u0430\u0433\u043e\u0432. RCE \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0441 29 \u0434\u0435\u0444\u0435\u043a\u0442\u0430\u043c\u0438. 9 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 8 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, 6 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438 7 \u2014 \u043a \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443.\n\n\u0425\u043e\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0431\u0430\u0433\u043e\u0432 (\u043f\u043e\u043a\u0430) \u043d\u0435 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0442\u0440\u0435\u0432\u043e\u0433\u0443 \u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439:\n\nCVE-2026-41096 (CVSS 9.8) \u2014 RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 Windows DNS client (!)\nCVE-2026-41089 (CVSS 9.8) \u2014 RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 Netlogon\nCVE-2026-33841, -35420, -40369 \u2014 \u0442\u0440\u0438 EoP \u0432 \u044f\u0434\u0440\u0435 Windows c CVSS 7.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 SYSTEM.\nCVE-2026-40402 (CVSS 9.3) \u2014 EoP \u0432 Windows Hyper-V, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0433\u043e\u0441\u0442\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c system \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \nCVE-2026-40365 (CVSS 8.8) \u2014 RCE \u0432 SharePoint, \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 \u0445\u043e\u0442\u044f \u0431\u044b \u0443\u0440\u043e\u0432\u043d\u044f site owner\nCVE-2026-41103 (CVSS 8.8) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043f\u043b\u0430\u0433\u0438\u043d Microsoft SSO \u0434\u043b\u044f  Jira & Confluence\nCVE-2026-42898 (CVSS 9.8) \u2014 RCE \u0432 \u043e\u043d-\u043f\u0440\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0438  Dynamics 365 \n\n\u0417\u0430\u0432\u0435\u0440\u0448\u0438\u043c \u043d\u0430\u0448\u0443 \u0442\u0435\u043b\u0435\u0433\u0440\u0430\u043c\u043c\u0443 \u0431\u043e\u0434\u0440\u043e\u0439 \u0447\u0435\u0442\u0432\u0451\u0440\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Office, \u0430 \u0442\u043e\u0447\u043d\u0435\u0435 \u0432 Word, \u043a\u0430\u0436\u0434\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 \u043f\u0430\u043d\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430: CVE-2026-40361, -40364, -40366 \u0438 -40367.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u0441\u044f, \u0434\u0430\u043c\u044b \u0438 \u0433\u043e\u0441\u043f\u043e\u0434\u0430.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-05-13T08:00:07.000000Z"}, {"uuid": "c916a296-c680-4f8b-90f9-2d697cc93539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41088", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20", "content": "", "creation_timestamp": "2026-05-13T01:08:48.000000Z"}, {"uuid": "3fa51434-2563-4416-b74b-f099de72d25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20", "content": "", "creation_timestamp": "2026-05-13T01:08:48.000000Z"}, {"uuid": "132b31b2-48ca-4e64-9361-b5930991c767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141", "content": "Microsoft heeft kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Uitvoeren van willekeurige code (root/admin-rechten)\n- Uitvoeren van willekeurige code (gebruikersrechten)\n- Verkrijgen van verhoogde rechten\n- Omzeilen van een beveiligingsmaatregel\n- Toegang tot gevoelige gegevens\n\nDe ernstigste kwetsbaarheden hebben kenmerken CVE-2026-40402, CVE-2026-41089 en CVE-2026-41096 toegewezen gekregen en bevinden zich respectievelijk in Hyper-V, NETLOGON en de DNS Client. De kwetsbaarheid in Hyper-V stelt een geauthenticeerde kwaadwillende in staat om uit de Guest-VM te breken en toegang te krijgen tot geheugen van de host en mogelijk willekeurige code uit te voeren op de host. De kwetsbaarheden in NETLOGON en de DNS Client stellen een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren op het kwetsbare systeem.\n\n**Met name Domain Controllers die toegankelijk zijn vanaf externe netwerken lopen een hoog risico voor actief misbruik van de kwetsbaarheid in NETLOGON.**\n\nHet verdient altijd aanbeveling om een systeem met de rol van Domain Controller niet publiek toegankelijk te hebben en, indien dit noodzakelijk is, additionele maatregelen te hebben genomen.\n\n```\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34340 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUndisclosed: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41095 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40398 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41096 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35416 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-41088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33841 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35420 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40369 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41097 | 6.70 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Native WiFi Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32161 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40408 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34332 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nTelnet Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35423 | 5.40 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34342 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40410 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35415 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32209 | 4.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Volume Manager Extension Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40380 | 6.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40377 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33839 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34330 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34331 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34347 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40403 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35438 | 8.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40402 | 9.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit Control: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32170 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33834 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41089 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Storport Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34350 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40397 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35418 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-33835 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34337 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - ICOMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33840 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35417 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35421 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-21530 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34351 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35422 | 6.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-40399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40405 | 7.50 | Denial-of-Service                   | \n| CVE-2026-40406 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40414 | 7.40 | Denial-of-Service                   | \n| CVE-2026-40415 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-33837 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34334 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40401 | 6.20 | Denial-of-Service                   | \n| CVE-2026-40413 | 7.40 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34339 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42825 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34338 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40382 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-33838 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35419 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42896 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34336 | 7.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Link-Layer Discovery Protocol (LLDP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34341 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-05-12T15:52:42.000000Z"}, {"uuid": "37560af1-6751-4f66-aaec-fcaedcbc7235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41088", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141", "content": "Microsoft heeft kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Uitvoeren van willekeurige code (root/admin-rechten)\n- Uitvoeren van willekeurige code (gebruikersrechten)\n- Verkrijgen van verhoogde rechten\n- Omzeilen van een beveiligingsmaatregel\n- Toegang tot gevoelige gegevens\n\nDe ernstigste kwetsbaarheden hebben kenmerken CVE-2026-40402, CVE-2026-41089 en CVE-2026-41096 toegewezen gekregen en bevinden zich respectievelijk in Hyper-V, NETLOGON en de DNS Client. De kwetsbaarheid in Hyper-V stelt een geauthenticeerde kwaadwillende in staat om uit de Guest-VM te breken en toegang te krijgen tot geheugen van de host en mogelijk willekeurige code uit te voeren op de host. De kwetsbaarheden in NETLOGON en de DNS Client stellen een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren op het kwetsbare systeem.\n\n**Met name Domain Controllers die toegankelijk zijn vanaf externe netwerken lopen een hoog risico voor actief misbruik van de kwetsbaarheid in NETLOGON.**\n\nHet verdient altijd aanbeveling om een systeem met de rol van Domain Controller niet publiek toegankelijk te hebben en, indien dit noodzakelijk is, additionele maatregelen te hebben genomen.\n\n```\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34340 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUndisclosed: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41095 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40398 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41096 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35416 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-41088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33841 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35420 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40369 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41097 | 6.70 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Native WiFi Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32161 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40408 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34332 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nTelnet Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35423 | 5.40 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34342 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40410 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35415 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32209 | 4.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Volume Manager Extension Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40380 | 6.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40377 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33839 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34330 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34331 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34347 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40403 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35438 | 8.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40402 | 9.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit Control: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32170 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33834 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41089 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Storport Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34350 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40397 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35418 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-33835 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34337 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - ICOMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33840 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35417 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35421 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-21530 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34351 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35422 | 6.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-40399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40405 | 7.50 | Denial-of-Service                   | \n| CVE-2026-40406 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40414 | 7.40 | Denial-of-Service                   | \n| CVE-2026-40415 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-33837 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34334 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40401 | 6.20 | Denial-of-Service                   | \n| CVE-2026-40413 | 7.40 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34339 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42825 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34338 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40382 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-33838 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35419 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42896 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34336 | 7.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Link-Layer Discovery Protocol (LLDP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34341 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-05-12T15:52:42.000000Z"}, {"uuid": "f940e6f1-263b-454e-a909-7f9c53f37953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41086", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20", "content": "", "creation_timestamp": "2026-05-13T01:08:48.000000Z"}, {"uuid": "2d313ea6-e0da-4471-aedf-7178aee8a36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116567592141770671", "content": "\ud83d\udcf0 Microsoft's May Patch Tuesday: 137 Flaws Fixed, Including Critical Netlogon RCE\nMicrosoft's May Patch Tuesday is huge: 137 vulnerabilities fixed, 30 critical. No zero-days for the first time in 22 months! \ud83d\udea8 Key patches for critical RCEs in Netlogon (CVE-2026-41089) and DNS Client (CVE-2026-41096). Patch now! \u2705 #PatchTuesday\n\ud83d\udd17 https://cyber.netsecops.io", "creation_timestamp": "2026-05-13T13:51:41.130329Z"}, {"uuid": "3f6ec442-7be3-40eb-8411-93d39a239c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mlqvtbi5ak2r", "content": "1/ \ud83d\udd34 Microsoft Patch Tuesday: 138 CVEs. Windows DNS RCE (CVE-2026-41096, CVSS 9.8) hits every Windows machine. Netlogon RCE (CVE-2026-41089) hits domain controllers unauthenticated. Patch BOTH immediately. (Hacker News)", "creation_timestamp": "2026-05-13T18:14:23.142842Z"}, {"uuid": "5573aa95-dc0d-487f-ae74-faf0c4855ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mlqvtbijws2r", "content": "1/ \ud83d\udd34 Microsoft Patch Tuesday: 138 CVEs. Windows DNS RCE (CVE-2026-41096, CVSS 9.8) hits every Windows machine. Netlogon RCE (CVE-2026-41089) hits domain controllers unauthenticated. Patch BOTH immediately. (Hacker News)", "creation_timestamp": "2026-05-13T18:14:24.319283Z"}, {"uuid": "fe879571-1246-40bd-a8b7-a373b243e636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mlqvtbints2r", "content": "1/ \ud83d\udd34 Microsoft Patch Tuesday: 138 CVEs. Windows DNS RCE (CVE-2026-41096, CVSS 9.8) hits every Windows machine. Netlogon RCE (CVE-2026-41089) hits domain controllers unauthenticated. Patch BOTH immediately. (Hacker News)", "creation_timestamp": "2026-05-13T18:23:27.222277Z"}, {"uuid": "f04a38d4-c6ec-4905-9d29-883dd8937964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mlqvtbiot22r", "content": "1/ \ud83d\udd34 Microsoft Patch Tuesday: 138 CVEs. Windows DNS RCE (CVE-2026-41096, CVSS 9.8) hits every Windows machine. Netlogon RCE (CVE-2026-41089) hits domain controllers unauthenticated. Patch BOTH immediately. (Hacker News)", "creation_timestamp": "2026-05-13T18:24:37.267500Z"}, {"uuid": "5dff2c03-87e6-4a2d-8fb4-fb5a7d49b25c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mlqvtbipsc2r", "content": "1/ \ud83d\udd34 Microsoft Patch Tuesday: 138 CVEs. Windows DNS RCE (CVE-2026-41096, CVSS 9.8) hits every Windows machine. Netlogon RCE (CVE-2026-41089) hits domain controllers unauthenticated. Patch BOTH immediately. (Hacker News)", "creation_timestamp": "2026-05-13T18:27:03.705731Z"}, {"uuid": "b9e50609-4455-45c2-999b-6e35e6b784bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mlqvtbipsd2r", "content": "1/ \ud83d\udd34 Microsoft Patch Tuesday: 138 CVEs. Windows DNS RCE (CVE-2026-41096, CVSS 9.8) hits every Windows machine. Netlogon RCE (CVE-2026-41089) hits domain controllers unauthenticated. Patch BOTH immediately. (Hacker News)", "creation_timestamp": "2026-05-13T18:29:18.371432Z"}, {"uuid": "2a3c1729-6351-4de5-8432-287aa2ad77db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mlqvtbiqrl2r", "content": "1/ \ud83d\udd34 Microsoft Patch Tuesday: 138 CVEs. Windows DNS RCE (CVE-2026-41096, CVSS 9.8) hits every Windows machine. Netlogon RCE (CVE-2026-41089) hits domain controllers unauthenticated. Patch BOTH immediately. (Hacker News)", "creation_timestamp": "2026-05-13T18:32:18.594534Z"}, {"uuid": "3c64e826-d599-4b9f-b3d6-cd67934e34a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116569682169173996", "content": "A lot of offensive activities were identified targeting Microsoft Windows (CVE-2026-41089) https://vuldb.com/vuln/363211/cti", "creation_timestamp": "2026-05-13T22:43:11.746506Z"}, {"uuid": "976d054b-f6c6-423b-92cc-ad018d982457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116573363485008554", "content": "\ud83d\udcf0 Microsoft's May Patch Tuesday: 137 Flaws Fixed, Including Critical Netlogon RCE\nMicrosoft's May Patch Tuesday is huge: 137 vulnerabilities fixed, 30 critical. No zero-days for the first time in 22 months! \ud83d\udea8 Key patches for critical RCEs in Netlogon (CVE-2026-41089) and DNS Client (CVE-2026-41096). Patch now! \u2705 #PatchTuesday\n\ud83d\udd17 https://cyber.netsecops.io/articles/microsofts-may-2026-patch-tuesday-fixes-137-vulnerabilities/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-05-14T14:26:31.472682Z"}, {"uuid": "4f4a6137-e36d-41f1-868f-37cb433bdf78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mm2twx7a522q", "content": "\ud83d\udccc CVE-2026-41089 - Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-41089", "creation_timestamp": "2026-05-17T17:07:45.118775Z"}, {"uuid": "8f0e627f-856b-49b3-9f79-aa8ea3b7bf60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mm5enuebra26", "content": "Microsoft's May Patch Tuesday fixed two wormable Windows flaws an unauthenticated attacker can ride straight through enterprise networks. The Netlogon bug (CVE-2026-41089) compromises domain controllers without any user interaction. A DNS Client bug is rated equally critical.", "creation_timestamp": "2026-05-18T17:11:37.457465Z"}, {"uuid": "5c9283ce-6c3a-4bab-9b3b-40e1a94dc8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mm7sq4ik2s2a", "content": "3/ \u26a0\ufe0f Microsoft Patch Tuesday: 118+ CVEs. Most urgent: CVE-2026-41089 (CVSS 9.8) \u2014 Netlogon stack overflow. Unauthenticated attacker can execute code on Windows domain controllers. If you run AD, patch NOW.\n\n#Cybersecurity #AI #GoogleIO #DigitalSecurity", "creation_timestamp": "2026-05-19T16:28:44.763608Z"}, {"uuid": "e4045bb5-c9c7-42a0-999a-07e9c5814270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mm7sq4iwr22a", "content": "3/ \u26a0\ufe0f Microsoft Patch Tuesday: 118+ CVEs. Most urgent: CVE-2026-41089 (CVSS 9.8) \u2014 Netlogon stack overflow. Unauthenticated attacker can execute code on Windows domain controllers. If you run AD, patch NOW.\n\n#Cybersecurity #AI #GoogleIO #DigitalSecurity", "creation_timestamp": "2026-05-19T16:33:06.900990Z"}, {"uuid": "f1f74f6b-d0e6-4c24-a47e-159701be9774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mm7sq4izos2a", "content": "3/ \u26a0\ufe0f Microsoft Patch Tuesday: 118+ CVEs. Most urgent: CVE-2026-41089 (CVSS 9.8) \u2014 Netlogon stack overflow. Unauthenticated attacker can execute code on Windows domain controllers. If you run AD, patch NOW.\n\n#Cybersecurity #AI #GoogleIO #DigitalSecurity", "creation_timestamp": "2026-05-19T16:35:18.213142Z"}, {"uuid": "f2b43d79-3312-434a-8446-b66a6516b9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mm7sq4j2o22a", "content": "3/ \u26a0\ufe0f Microsoft Patch Tuesday: 118+ CVEs. Most urgent: CVE-2026-41089 (CVSS 9.8) \u2014 Netlogon stack overflow. Unauthenticated attacker can execute code on Windows domain controllers. If you run AD, patch NOW.\n\n#Cybersecurity #AI #GoogleIO #DigitalSecurity", "creation_timestamp": "2026-05-19T16:35:25.181620Z"}, {"uuid": "e7d33a1d-9750-4761-9466-6c6539eb3ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116641491214328341", "content": "Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)https://blog.0patch.com/2026/05/micropatches-released-for-windows_0304568783.html", "creation_timestamp": "2026-05-26T15:05:11.480571Z"}, {"uuid": "e7f07f07-d6a7-425e-8c0e-a33288c56dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/Reverse-Engineering.activitypub.awakari.com.ap.brid.gy/post/3mmrfxa6mezh2", "content": "Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089) May 2026 Windows Updates brought a patch for CVE-2026-41089 , a remotely exploitable issue on Wind...\n\n#Malware #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-26T16:28:04.460817Z"}, {"uuid": "58072fe8-e4c5-470a-9f56-4a4ba9f86511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116642113317555082", "content": "Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)#CVE_2026_41089 https://blog.0patch.com/2026/05/micropatches-released-for-windows_0304568783.html", "creation_timestamp": "2026-05-26T17:43:23.319832Z"}, {"uuid": "f32bc2d4-aa62-45f0-8a50-f38b7d75183f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/Reverse-Engineering.activitypub.awakari.com.ap.brid.gy/post/3mmtmn6qexla2", "content": "Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089) May 2026 Windows Updates brought a patch for CVE-2026-41089 , a remotely exploitable issue on Wind...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-27T13:33:00.929951Z"}, {"uuid": "926e2b26-aaa7-4e72-b9a8-512c04bee814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41084", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5kdu3nf22d", "content": "CVE-2026-41084: Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutation", "creation_timestamp": "2026-05-31T12:18:34.613283Z"}, {"uuid": "47ac48be-fd0e-4403-b9d7-25cea17602e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mn75y2msvz42", "content": "Windows Netlogon 0-Click RCE Vulnerability Now Actively Exploited In The Wild The critical Windows Netlogon remote code execution (RCE) vulnerability tracked as CVE-2026-41089 is now under active e...\n\n#Cyber #Security #Cyber #Security #News [\u2026] \n\n[Original post on cybersecuritynews.com]", "creation_timestamp": "2026-06-01T03:42:40.481951Z"}, {"uuid": "ad3adb7d-358c-4f37-8852-48acba53dc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mn7fvpslv662", "content": "Windows Netlogon 0-Click RCE Flaw Exploited in the Wild A critical zero-click remote code execution (RCE) flaw in Windows Netlogon, tracked as CVE-2026-41089, is now being actively exploited in the...\n\n#Cyber #Security #News #Cyber #security #news #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-01T06:05:04.367576Z"}, {"uuid": "ec151a5b-98b6-4067-b9f1-18256b73b0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mn7gkirwjf2j", "content": "Windows Netlogon\u306e\u30bc\u30ed\u30af\u30ea\u30c3\u30afRCE\u8106\u5f31\u6027\u3001\u5b9f\u74b0\u5883\u3067\u306e\u60aa\u7528\u3092\u78ba\u8a8d\n\nWindows Netlogon\u306b\u5b58\u5728\u3059\u308b\u30bc\u30ed\u30af\u30ea\u30c3\u30af\u578b\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-41089\u300d\u304c\u3001\u5b9f\u74b0\u5883\u3067\u6d3b\u767a\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u3068\u3057\u3066\u7a3c\u50cd\u3057\u3066\u3044\u308b\u672a\u30d1\u30c3\u30c1\u306eWindows Server\u74b0\u5883\u306b\u3068\u3063\u3066\u3001\u30ea\u30b9\u30af\u306f\u4e00\u6bb5\u3068\u9ad8\u307e\u3063\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31", "creation_timestamp": "2026-06-01T06:16:02.357349Z"}, {"uuid": "d798e694-2e8a-4c75-bc62-2be82e08e1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mn7ip3ixt7w2", "content": "Windows Netlogon 0-Click RCE Flaw Exploited in the Wild A critical zero-click remote code execution (RCE) flaw in Windows Netlogon, tracked as CVE-2026-41089, is now being actively exploited in the...\n\n#Cyber #Security #News #Cyber #security #news #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-01T06:54:27.490007Z"}, {"uuid": "b5fef6bd-f573-4cfd-a46e-65cc27ec84ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/86769", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xABCD01\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-01 04:51:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-01T05:00:03.000000Z"}, {"uuid": "264a9dbe-70bf-4174-8a72-c1dad8df788e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://gist.github.com/ichintu/768c3afdd2e78ccd28f1be47eded9ec4", "content": "**Daily Cyber\u2011Threat Intelligence \u2013\u202f24\u202fJun\u202f2026**\n\n---\n\n###1. \u201c6 Critical Security Gaps Every CISO Must Address\u201d\n| Gap | What it means | Key takeaway |\n|-----|---------------|--------------|\n| **Perception** | Security seen as pure IT protection, not business resilience | Shift focus to resilience; include CC at board table |\n| **Speed vs. Threat Actors** | Rapid exploitation of disclosed flaws (e.g., React2Shell) outpaces defenses | Adopt AI, automation and Continuous Threat Exposure Management (CTEM) |\n| **Speed vs. Business** | Security must keep pace with AI, quantum, hyper\u2011connectivity | Upskill teams in AI; align security with business transformation |\n| **Skills** | Talent shift from headcount to modern, AI\u2011enabled expertise | 60\u202f% of leaders cite skills gap; need broader organization\u2011wide skill build |\n| **AI Deployment** | \u201cShadow AI\u201d and poor governance create control gaps | Only 20\u202f% of firms have full AI\u2011governance; need clear policies |\n| **Legacy** | \u201cSet\u2011it\u2011and\u2011forget\u201d systems expose high\u2011risk AI\u2011attacks | Risk\u2011based modernization must prioritize legacy tech |\n\n*Support:* Proofpoint 2025 VoC: 1/3 of CISOs say data protection is inadequate; 58\u202f% feel unprepared; only 67\u202f% feel resources are enough.\n\n---\n\n###2. Press Release \u2013\u202fCSO30 ASEAN & Hong\u202fKong Awards 2026\n- **Purpose:** Benchmark regional cybersecurity maturity, honour leaders turning security into business capability.\n- **Categories:**  \n  - CSO Leadership (Individual)  \n  - CSO Transformation (Individual)  \n  - Ecosystem (Team)  \n- **Criteria:** Board influence, measurable impact, community contribution, ecosystem strengthening.  \n- **Nomination:** Online form.  \n- **Deadline:** 31\u202fJuly\u202f2026.  \n- **Gala:** https://event.foundryco.com/cio-100-asean-and-hk/  \n- **Media contact:** Estelle Quek, Editorial Director, CIO ASEAN & CSO ASEAN.\n\n---\n\n###3. CVE\u20112026\u201141089 \u2013 Windows Netlogon 0\u2011Click RCE\n- **Impact:** Remote code execution without user interaction.  \n- **Status:** Actively exploited in the wild (June\u202f01\u202f2026).  \n- **Affected:** All Windows Netlogon service customers.  \n- **Links:**  \n  - Article: https://cybersecuritynews.com/windows-netlogon-0-click-rce/  \n  - CVE: https://cvefeed.io/vuln/detail/CVE-2026-41089  \n- **Action:** Immediate patching and hardening of Netlogon services.\n\n---\n\n###4. CVE\u20112026\u201148188 \u2013 SQL Injection in OTRS/OTRS Community Edition\n- **Vulnerability:** Unauthenticated SQL injection that can bypass authentication when NO_BACKSLASH_ESCAPES mode is active.  \n- **Affected Versions:**  \n  - OTRS: 7.0.x\u20132026.3.x, 8.0.x\u20132026.3.x, 2023.x\u20132026.x  \n  - OTRS Community Edition: 6.0.x  \n  - Derivative products likely impacted.  \n- **Severity:** 9.1 (CRITICAL).  \n- **Recommendation:** Upgrade to latest patched releases, check SQL mode configuration.\n\n---\n\n**Bottom line:** CISOs must close perception, speed, skills, AI, and legacy gaps, recognize regional excellence through CSO30 awards, and address emerging critical vulnerabilities in Windows Netlogon and OTRS with rapid patching and governance.", "creation_timestamp": "2026-06-01T08:00:17.000000Z"}, {"uuid": "a4b58b8a-d9e2-418b-827c-3d99a9e89eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-may-2026-monthly-rollup-av26-456", "content": "", "creation_timestamp": "2026-06-01T05:34:39.000000Z"}, {"uuid": "95255512-4842-46b2-a88e-09d451af635f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mna6rdik3z2g", "content": "Critical Windows Netlogon Zero-Day Under Active Exploitation: CVE-2026-41089 Triggers Global Security Alarm +\u00a0Video\n\nIntroduction: A Silent Crack in the Backbone of Enterprise Identity The modern enterprise world runs on trust, and few systems embody that trust more than Windows domain\u2026", "creation_timestamp": "2026-06-01T13:29:22.455482Z"}, {"uuid": "ae1e5704-c9b0-4042-80b2-f0484a17f5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/true_secator/8264", "content": "\u0411\u0435\u043b\u044c\u0433\u0438\u0439\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CCB) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0439, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows Netlogon \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nMicrosoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-41089 (CVSS 9.8) \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043c\u0430\u0439\u0441\u043a\u043e\u0433\u043e PatchTuesday, \u043e\u043f\u0438\u0441\u0430\u0432 \u0435\u0451 \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0441\u0442\u0435\u043a\u0430 \u0432 Windows Netlogon, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 Windows, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430. \n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 Netlogon, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCVE-2026-41089 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Windows Server, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e, Windows Server 2025.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e \u043e\u0442 12 \u043c\u0430\u044f, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 Windows Attack Research & Protection (WARP), \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c Microsoft, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430\u0447\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u044d\u0443\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CCB \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e\u043a\u0430 \u043d\u0438\u043a\u0430\u043a \u043d\u0435\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u043c\u043e\u043b\u0447\u0430\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 CVE-2026-41089.\n\n\u0412\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043c\u0438\u043a\u0440\u043e\u043c\u044f\u0433\u043a\u0438\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f Nightmare Eclipse, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u0438\u0442\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0437\u0430 \u043d\u0435\u0434\u043e\u0431\u0440\u043e\u0441\u043e\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0432 \u0441\u0432\u043e\u0438 \u0434\u043e\u0432\u043e\u0434\u044b \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438 \u043f\u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0443\u043b\u044f\u043c.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0430 \u0441 Microsoft \u0438 \u0437\u0430\u0432\u0443\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u0432 \u0430\u0434\u0440\u0435\u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u044b\u043f\u0430\u043b\u0438\u0441\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0441\u043b\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438 \u0438\u0437\u044b\u0441\u043a\u0430\u043d\u0438\u044f.\n\n\u0422\u0430\u043a \u0447\u0442\u043e Nightmare Eclipse \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Microsoft, \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 BitLocker \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u043e \u0438\u043c\u0435\u043d\u0438 JonasLyk.", "creation_timestamp": "2026-06-01T13:13:14.000000Z"}, {"uuid": "71458f54-5563-47c9-b583-ef06c8c25284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mnaatabjgw26", "content": "Critical #Windows #Netlogon vulnerability (CVE-2026-41089) under active exploitation. Immediate patching and enhanced monitoring are essential to prevent domain compromise. #CyberSecurity #InfoSec Link: thedailytechfeed.com/critical-win...", "creation_timestamp": "2026-06-01T14:06:12.756112Z"}, {"uuid": "0b1a6f86-ab25-4a00-9d05-6ed76e017947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mnablnsyxp2a", "content": "Heads up, IT pros! Windows Netlogon is facing a dual threat: a critical new RCE (CVE-2026-41089) is actively exploited, and the old Zerologon (CVE-2020-1472) is also making a comeback. Don't let attackers take over your\u2026\n\nhttps://www.tpp.blog/1ysl63k\n\n#cybersecurity #cve202641089 #cve20201472", "creation_timestamp": "2026-06-01T14:19:52.425838Z"}, {"uuid": "8b054e3a-eda5-4a41-8334-bf4c3b27dc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskf3nk2d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:45.907430Z"}, {"uuid": "398ca2fe-decf-4825-844e-b0d0c48e553b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskfegs2d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:48.023290Z"}, {"uuid": "5dc30448-60eb-46fc-a073-6e2fadbadc87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskfhek2d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:49.169886Z"}, {"uuid": "766afdc6-677e-41af-a7b3-57687fe6b49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskfjd22d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:50.237458Z"}, {"uuid": "00c9969e-66bb-4dee-9c5b-e978d2607fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskfkcc2d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:51.291949Z"}, {"uuid": "680d9d14-2d58-4d13-b826-67e8be43ada1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskflbk2d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:52.315838Z"}, {"uuid": "8656504d-e5d8-485f-b773-c964bfc8e8fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskfmas2d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:53.339263Z"}, {"uuid": "ed51c9be-66d7-47ed-addf-4d9df23cfda4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskfmat2d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:54.428040Z"}, {"uuid": "11070e6e-8150-4333-baec-7c7c8d11f682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnabskfmau2d", "content": "6/ \ud83d\udd34 Windows Netlogon CVE-2026-41089 (CVSS 9.8) \u2014 now actively exploited. No password. No interaction. Just domain controller takeover. Echoes Zerologon. Patch your domain controllers NOW. (BleepingComputer)", "creation_timestamp": "2026-06-01T14:23:55.439809Z"}, {"uuid": "3621b492-c8c1-4b42-82c7-6ea34a8ed116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnac6xubyw22", "content": "Windows Netlogon \u306e RCE \u8106\u5f31\u6027\u304c\u60aa\u7528\u3001\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u306b\u5371\u6a5f\uff08CVE-2026-41089\uff09\n\n\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308bWindows Netlogon\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027CVE-2026-41089\u304c\u3001\u5b9f\u969b\u306e\u74b0\u5883\u3067\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3001\u30d9\u30eb\u30ae\u30fc\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30bb\u30f3\u30bf\u30fc\uff08CCB\uff09\u304c\u91d1\u66dc\u65e5\u306b\u8b66\u544a\u3057\u307e\u3057\u305f\u3002 CVE-2026-41089 \u306e\u6982\u8981 CVE-2026-41089\u306f\u3001Window...", "creation_timestamp": "2026-06-01T14:30:40.699141Z"}, {"uuid": "436352ba-9260-4099-88db-449a6279da82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mnacfco72k2p", "content": "Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/06/01/w... \n\n#vulnerability #Windows #cybersecurity", "creation_timestamp": "2026-06-01T14:34:16.965154Z"}, {"uuid": "c0c6b457-e484-4b3e-a422-fbf1f4fa359a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mnaephwblz25", "content": "The critical Windows Netlogon remote code execution (RCE) vulnerability tracked as CVE-2026-41089 is now under active exploitation in the wild, significantly raising the risk profile for unpatched Windows Server environments.", "creation_timestamp": "2026-06-01T15:15:41.188212Z"}, {"uuid": "96ed73d0-c48a-4a7b-8ef9-c2cacd8f0a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnaera5hqm2m", "content": "\u653b\u6483\u8005\u306b\u72d9\u308f\u308c\u308bWindows Netlogon\u306e\u91cd\u5927\u8106\u5f31\u6027\n\n\u30d9\u30eb\u30ae\u30fc\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30bb\u30f3\u30bf\u30fc\uff08CCB\uff09\u306f\u3001\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304cWindows\u306eNetlogon\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u60aa\u7528\u3057\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-41089\uff08CVSS\u30b9\u30b3\u30a2\uff1a9.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001Microsoft\u304c5\u670812\u65e5\u306ePatch Tuesday", "creation_timestamp": "2026-06-01T15:16:40.117562Z"}, {"uuid": "966f06b6-dc3c-46b5-8038-3b1df15854e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mnage7hr7ua2", "content": "Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs Organizations are advised to patch CVE-2026-41089 as soon as possible, given its severity, the potential ongoing exploitation. The...\n\n#Vulnerabilities #Netlogon #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-01T15:46:41.122924Z"}, {"uuid": "ccc5aa72-fb29-45cd-8f6e-048e385bd663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116675970087374835", "content": "A lot of offensive activities were identified targeting Microsoft Windows (CVE-2026-41089) https://vuldb.com/vuln/363211/cti", "creation_timestamp": "2026-06-01T17:13:40.135498Z"}, {"uuid": "072cc942-ad0d-46ed-a760-fa7973f8a1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/116676363651530592", "content": "So CVE-2026-41089 (CVSS 9.8) in Windows Netlogon can be triggered by sending a username that is AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA or longer.How original.", "creation_timestamp": "2026-06-01T18:55:23.500182Z"}, {"uuid": "1677aeb8-0e8a-4d72-9c6b-4a958ee83e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mnarpvh4uc2f", "content": "CVE-2026-41089 \u2014 Microsoft Windows Netlogon BuildSamLogonResponse Stack-based Buffer Overflow RCE\n\n\n aretiq.ai -> \n\n\nOriginal->", "creation_timestamp": "2026-06-01T19:08:35.590004Z"}, {"uuid": "065b7f53-3ec1-49eb-8751-700b55a93383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mnat5l4b462h", "content": "URGENT PATCH NOW: CVE-2026-41089 \u2013 The Zerologon-Level Netlogon RCE Being Mass-Exploited in the Wild +\u00a0Video\n\nIntroduction: CVE-2026-41089 is a CVSS 9.8 stack-based buffer overflow vulnerability in the Windows Netlogon service. This critical flaw allows an unauthenticated, remote attacker to\u2026", "creation_timestamp": "2026-06-01T19:34:07.693892Z"}, {"uuid": "7daaccb6-e6cd-4372-af3b-5b89e42622ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mnatanqeuja2", "content": "CVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow https://github.com/0xABCD01/CVE-2026-41089", "creation_timestamp": "2026-06-01T19:35:53.737516Z"}, {"uuid": "f60e8d8e-65ec-4915-b1fb-e14d594dc5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnaumnhagv26", "content": "Critical Windows Netlogon flaw CVE-2026-41089 is being actively exploited for remote code execution on domain controllers. Unauthenticated attacks can gain System-level access via crafted network requests. #Netlogon #Windows #Belgium", "creation_timestamp": "2026-06-01T20:00:26.616630Z"}, {"uuid": "a174665d-270d-473e-947a-98f69c882839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnb3f5w4cm2h", "content": "Critical Windows Netlogon Exploit CVE-2026-41089 Sparks Active Global Domain Controller Attacks +\u00a0Video\n\n\ud83d\udd10 Introduction: A Silent Break in the Core of Enterprise Identity Security A newly disclosed critical vulnerability in Microsoft Windows domain services is rapidly becoming a real-world attack\u2026", "creation_timestamp": "2026-06-01T22:03:48.182858Z"}, {"uuid": "cb87f6ca-aafa-4ce6-b11c-709759f3cea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116677153658366203", "content": ":brdScream2: Hello, CVE-2026-41089. My name is AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA", "creation_timestamp": "2026-06-01T22:14:39.117670Z"}, {"uuid": "f32c61bb-9dcb-4793-bf70-13b08ddf6bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://chaos.social/users/gsuberland/statuses/116677657051969524", "content": "hmm. CVE-2026-41089 looks like a super basic stack buffer overflow in LSASS, straight out of a remote packet. I know Microsoft runs CodeQL over their code, and I can't envision a world where LSASS doesn't have coverage, so that raises questions about how it wasn't identified. my best guess is a process gap somewhere, but it would be cool to see a post incident report with info.\n(and before one of you mentions the slopcoding thought-terminating clich\u00e9, maybe think about it for a minute first)", "creation_timestamp": "2026-06-02T00:22:39.655672Z"}, {"uuid": "cd2c4d90-7988-402b-ab2c-0aa91f6ec536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mnbelaywef2y", "content": "Windows Netlogon\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u304c\u60aa\u7528\u3055\u308c\u3001\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u304c\u5371\u967a\u306b\u3055\u3089\u3055\u308c\u3066\u3044\u307e\u3059\uff08CVE-2026-41089\uff09 \n\nWindows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)  #HelpNetSecurity (Jun 1)\n\nwww.helpnetsecurity.com/2026/06/01/w...", "creation_timestamp": "2026-06-02T00:45:59.752651Z"}, {"uuid": "909d1b18-4c4c-483f-933e-f83d423e80a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnbkhiii6g2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-0257: 34 interactions\nCVE-2026-48778: 22 interactions\nCVE-2026-48095: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-41089: 12 interactions\nCVE-2026-8732: 9 interactions\nCVE-2026-44962: 8 interactions\n", "creation_timestamp": "2026-06-02T02:31:16.192077Z"}, {"uuid": "9a7a1457-efaa-4951-a041-146d271bf4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41089", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnblywgvjg2s", "content": "\ud83d\udcf0 Ancaman Infrastruktur: Celah Kritis RCE Windows Netlogon (CVE-2026-41089) Mulai Dieksploitasi Secara Aktif\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/02/celah-kritis-rce-windows-netlogon-dieksploitasi/\n\n#activeDirectory #bitlocker #cve-2026-41089 #domainController #keaman", "creation_timestamp": "2026-06-02T03:00:09.537841Z"}, {"uuid": "bfab47ac-ade3-4200-9751-cbc4a098a8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mnc4uyy5oh23", "content": "\ud83d\udea8 Une faille critique d\u00e9j\u00e0 exploit\u00e9e\u2026 \u00eates-vous prot\u00e9g\u00e9 ?\n\nLe Centre pour la #cybers\u00e9curit\u00e9 de Belgique (CCB) a publi\u00e9 une alerte \u00e0 propos de la CVE-2026-41089. \n\n\ud83d\udd10 Ne laissez pas cette faille ouverte dans votre environnement\n\n#Windows", "creation_timestamp": "2026-06-02T08:00:57.360114Z"}, {"uuid": "1c7f6db7-0069-4f01-96a2-fc1e38253c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mnc5h5has2g4", "content": "Windows Netlogon\u306eRCE\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-41089\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/45887/", "creation_timestamp": "2026-06-02T08:11:06.307578Z"}, {"uuid": "44a63469-7dda-4090-b785-8eef66572470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mnc6m4nv7ff2", "content": "Threat Actors Target Critical Windows Netlogon Flaw CVE-2026-41089 A critical Windows Netlogon vulnerability, tracked as CVE-2026-41089, has emerged as a significant security concern after au...\n\n#Firewall #Daily #Cyber #News #Hacker #News #Threat #Actors [\u2026] \n\n[Original post on thecyberexpress.com]", "creation_timestamp": "2026-06-02T08:33:00.296642Z"}, {"uuid": "d34ff9a0-20be-43b0-a396-cdd142a535f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/cyberbannews_ir/22034", "content": "\ud83d\udd34 \u0647\u0634\u062f\u0627\u0631 \u062f\u0631\u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 Netlogon \u0648\u06cc\u0646\u062f\u0648\u0632 \n\n\ud83d\udd3b \u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0646\u0634\u0631\u06cc\u0647 The Cyber Express\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 Netlogon \u0648\u06cc\u0646\u062f\u0648\u0632 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-41089 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0634\u062f\u062a \u0622\u0646 9.8 \u0627\u0632 10 \u0627\u0639\u0644\u0627\u0645 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\n\ud83d\udd3b \u0628\u0631 \u0627\u0633\u0627\u0633 \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634\u060c \u0627\u06cc\u0646 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u0647\u0627\u0646\u0647 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a (Patch Tuesday) \u062f\u0631 \u0645\u0627\u0647 \u0645\u06cc \u06f2\u06f0\u06f2\u06f6 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c \u0627\u0645\u0627 \u0627\u06a9\u0646\u0648\u0646 \u0647\u0634\u062f\u0627\u0631\u0647\u0627\u06cc\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u06a9\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u062d\u0627\u0644 \u062a\u0644\u0627\u0634 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0639\u0645\u0644\u06cc \u0627\u0632 \u0622\u0646 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0647\u0633\u062a\u0646\u062f.\n\n\ud83d\udd39 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0633\u0631\u0631\u06cc\u0632 \u0628\u0627\u0641\u0631 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 Netlogon \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0634\u0628\u06a9\u0647\u200c\u0627\u06cc \u062e\u0627\u0635\u060c \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u06cc\u0627 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631\u060c \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0647\u06a9 #\u0633\u0631\u0642\u062a_\u062f\u0627\u062f\u0647 #\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2026-06-02T10:26:11.000000Z"}, {"uuid": "3e600d2a-6cfe-4de6-9058-5fec80476220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mncmfl4jny2q", "content": "Threat Actors Target Critical Windows Netlogon Flaw CVE-2026-41089", "creation_timestamp": "2026-06-02T12:38:38.322196Z"}, {"uuid": "92998630-1096-4e53-8f1d-6d13b7188589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141", "content": "Microsoft heeft kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Uitvoeren van willekeurige code (root/admin-rechten)\n- Uitvoeren van willekeurige code (gebruikersrechten)\n- Verkrijgen van verhoogde rechten\n- Omzeilen van een beveiligingsmaatregel\n- Toegang tot gevoelige gegevens\n\nDe ernstigste kwetsbaarheden hebben kenmerken CVE-2026-40402, CVE-2026-41089 en CVE-2026-41096 toegewezen gekregen en bevinden zich respectievelijk in Hyper-V, NETLOGON en de DNS Client. De kwetsbaarheid in Hyper-V stelt een geauthenticeerde kwaadwillende in staat om uit de Guest-VM te breken en toegang te krijgen tot geheugen van de host en mogelijk willekeurige code uit te voeren op de host. De kwetsbaarheden in NETLOGON en de DNS Client stellen een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren op het kwetsbare systeem.\n\n**Met name Domain Controllers die toegankelijk zijn vanaf externe netwerken lopen een hoog risico voor actief misbruik van de kwetsbaarheid in NETLOGON.**\n\nHet verdient altijd aanbeveling om een systeem met de rol van Domain Controller niet publiek toegankelijk te hebben en, indien dit noodzakelijk is, additionele maatregelen te hebben genomen.\n\n**Update:** Inmiddels wordt door diverse partijen actief misbruik gemeld van CVE-2026-41089, de kwetsbaarheid in NETLOGON.\n\n```\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34340 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUndisclosed: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41095 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40398 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41096 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35416 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-41088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33841 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35420 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40369 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41097 | 6.70 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Native WiFi Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32161 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40408 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34332 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nTelnet Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35423 | 5.40 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34342 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40410 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35415 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32209 | 4.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Volume Manager Extension Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40380 | 6.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40377 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33839 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34330 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34331 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34347 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40403 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35438 | 8.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40402 | 9.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit Control: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32170 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33834 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41089 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Storport Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34350 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40397 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35418 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-33835 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34337 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - ICOMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33840 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35417 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35421 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-21530 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34351 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35422 | 6.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-40399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40405 | 7.50 | Denial-of-Service                   | \n| CVE-2026-40406 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40414 | 7.40 | Denial-of-Service                   | \n| CVE-2026-40415 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-33837 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34334 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40401 | 6.20 | Denial-of-Service                   | \n| CVE-2026-40413 | 7.40 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34339 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42825 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34338 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40382 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-33838 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35419 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42896 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34336 | 7.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Link-Layer Discovery Protocol (LLDP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34341 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-02T09:33:41.000000Z"}, {"uuid": "0f90c580-0ddc-4df7-a8df-00d3ec08827b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41088", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141", "content": "Microsoft heeft kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Uitvoeren van willekeurige code (root/admin-rechten)\n- Uitvoeren van willekeurige code (gebruikersrechten)\n- Verkrijgen van verhoogde rechten\n- Omzeilen van een beveiligingsmaatregel\n- Toegang tot gevoelige gegevens\n\nDe ernstigste kwetsbaarheden hebben kenmerken CVE-2026-40402, CVE-2026-41089 en CVE-2026-41096 toegewezen gekregen en bevinden zich respectievelijk in Hyper-V, NETLOGON en de DNS Client. De kwetsbaarheid in Hyper-V stelt een geauthenticeerde kwaadwillende in staat om uit de Guest-VM te breken en toegang te krijgen tot geheugen van de host en mogelijk willekeurige code uit te voeren op de host. De kwetsbaarheden in NETLOGON en de DNS Client stellen een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren op het kwetsbare systeem.\n\n**Met name Domain Controllers die toegankelijk zijn vanaf externe netwerken lopen een hoog risico voor actief misbruik van de kwetsbaarheid in NETLOGON.**\n\nHet verdient altijd aanbeveling om een systeem met de rol van Domain Controller niet publiek toegankelijk te hebben en, indien dit noodzakelijk is, additionele maatregelen te hebben genomen.\n\n**Update:** Inmiddels wordt door diverse partijen actief misbruik gemeld van CVE-2026-41089, de kwetsbaarheid in NETLOGON.\n\n```\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34340 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUndisclosed: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41095 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40398 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41096 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35416 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-41088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33841 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35420 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40369 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41097 | 6.70 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Native WiFi Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32161 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40408 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34332 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nTelnet Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35423 | 5.40 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34342 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40410 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35415 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32209 | 4.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Volume Manager Extension Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40380 | 6.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40377 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33839 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34330 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34331 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34347 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40403 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35438 | 8.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40402 | 9.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit Control: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32170 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33834 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41089 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Storport Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34350 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40397 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35418 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-33835 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34337 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - ICOMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33840 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35417 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35421 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-21530 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34351 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35422 | 6.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-40399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40405 | 7.50 | Denial-of-Service                   | \n| CVE-2026-40406 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40414 | 7.40 | Denial-of-Service                   | \n| CVE-2026-40415 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-33837 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34334 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40401 | 6.20 | Denial-of-Service                   | \n| CVE-2026-40413 | 7.40 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34339 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42825 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34338 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40382 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-33838 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35419 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42896 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34336 | 7.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Link-Layer Discovery Protocol (LLDP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34341 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-02T09:33:41.000000Z"}, {"uuid": "41fa2acb-4f4b-4860-b913-7034b7d0a3b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/tmgibs.bsky.social/post/3mncramygis2z", "content": "Belgium\u2019s cybersecurity authority confirmed attackers are actively exploiting CVE-2026-41089, a wormable bug that gives full control of domain controllers.", "creation_timestamp": "2026-06-02T14:05:23.635159Z"}, {"uuid": "ced43859-2f69-4e97-a74a-12bfca71d1ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "bdc2fb02-c627-4535-9027-9fe00c39b87c", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://ccb.belgium.be/advisories/warning-microsoft-patch-tuesday-may-2026-patches-118-vulnerabilities-16-critical-102", "content": "", "creation_timestamp": "2026-06-02T17:21:17.421212Z"}, {"uuid": "c5386d98-f096-4b44-ac4c-96a566f58ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnd7ferxqc2v", "content": "Windows Netlogon Zero-Day Sparks Alarm: Critical CVE-2026-41089 Actively Exploited in the Wild +\u00a0Video\n\nIntroduction: A Silent Crack in the Core of Enterprise Identity A newly disclosed critical vulnerability in Microsoft Windows Netlogon has escalated into a serious cybersecurity concern after\u2026", "creation_timestamp": "2026-06-02T18:18:34.473919Z"}, {"uuid": "5cbe7b55-9818-4316-ba7a-751413a41ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/hGWk8MIih0D3DxUwNWRe3y8KubP65D3PuLH-MA53N78330U", "content": "", "creation_timestamp": "2026-06-02T15:00:07.000000Z"}, {"uuid": "26abe9a3-4ee8-44d9-b82f-4d10feb43871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/BlKk-eaWB29gmt0rVEcwTVvusxaI3MWZWXGUjwx1QaUEK7c", "content": "", "creation_timestamp": "2026-06-01T09:00:04.000000Z"}, {"uuid": "41f97b5b-3412-4c06-a9c9-ebe53740c593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87030", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Orthos-s0c\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-02 19:59:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-02T20:00:04.000000Z"}, {"uuid": "5a9662ea-33d7-4e21-853c-7099aaea50d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mndoytv4rm2q", "content": "CRITICAL: Microsoft\u2019s May 2026 Patch Tuesday Unleashes 138 CVEs \u2013 CVE-2026-41089 Actively Exploited (CVSS 98) \u2013 Patch NOW! +\u00a0Video\n\nIntroduction: Microsoft\u2019s May 2026 security update is one of the largest in the company\u2019s history, addressing 138 new CVEs including a rare CVSS 10 vulnerability in\u2026", "creation_timestamp": "2026-06-02T22:57:53.176826Z"}, {"uuid": "f58a3c7a-5ecf-4de9-aa35-872f67fcd72d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87053", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-41089-detector\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hnytgl\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-03 00:59:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSafe detector for CVE-2026-41089 Windows Netlogon RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-03T01:00:04.000000Z"}, {"uuid": "db938ff7-a805-4d98-a56e-ae2fa7c41242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87065", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hnytgl\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-03 02:59:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 - Windows Netlogon CLDAP Remote Code Execution Exploit (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-03T03:00:04.000000Z"}, {"uuid": "3637b128-88df-4d78-9c95-ef84a49e72f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/orderofsixangles/2918", "content": "CVE-2026-41089 \u2014 Microsoft Windows Netlogon BuildSamLogonResponse Stack-based Buffer Overflow RCE\n\nhttps://aretiq.ai/research/vul260513-cve-2026-41089-microsoft-windows-netlogon-buildsamlogonresponse-stack-based-buffer-overflow-rce/", "creation_timestamp": "2026-06-03T06:39:45.000000Z"}, {"uuid": "4769a801-a588-4a1d-9a60-6de05de91657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/truthphoenix.bsky.social/post/3mnews4sbsk2w", "content": "Windows Netlogon CVE-2026-41089 exploited: Priority patch needed\n\nwww.notebookcheck.net/Windows-Netl...", "creation_timestamp": "2026-06-03T10:49:07.554661Z"}, {"uuid": "8e5edd26-5ef5-4a20-99ac-29fc510ba286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnfp6d3u222z", "content": "2/ \u26a0\ufe0f URGENT. CVE-2026-41089 (CVSS 9.8) in Windows Netlogon is actively exploited. No credentials. Full domain takeover. Belgium's CCB issued emergency warning. Patch domain controllers RIGHT NOW.", "creation_timestamp": "2026-06-03T18:10:36.989890Z"}, {"uuid": "4da03b91-343f-4f28-8df7-43fbd0bf75d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnfp6d3uzc2z", "content": "2/ \u26a0\ufe0f URGENT. CVE-2026-41089 (CVSS 9.8) in Windows Netlogon is actively exploited. No credentials. Full domain takeover. Belgium's CCB issued emergency warning. Patch domain controllers RIGHT NOW.", "creation_timestamp": "2026-06-03T18:10:38.079652Z"}, {"uuid": "b2a4a7a7-f18d-41e6-93c0-84f2f1246c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnfp6d3vyk2z", "content": "2/ \u26a0\ufe0f URGENT. CVE-2026-41089 (CVSS 9.8) in Windows Netlogon is actively exploited. No credentials. Full domain takeover. Belgium's CCB issued emergency warning. Patch domain controllers RIGHT NOW.", "creation_timestamp": "2026-06-03T18:14:59.229319Z"}, {"uuid": "2490ec67-21ba-48d1-b21a-47a38150e460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnfp6d3wxs2z", "content": "2/ \u26a0\ufe0f URGENT. CVE-2026-41089 (CVSS 9.8) in Windows Netlogon is actively exploited. No credentials. Full domain takeover. Belgium's CCB issued emergency warning. Patch domain controllers RIGHT NOW.", "creation_timestamp": "2026-06-03T18:19:20.571583Z"}, {"uuid": "66e3256a-d9ae-4c57-8a86-376349182416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnfp6d3xx22z", "content": "2/ \u26a0\ufe0f URGENT. CVE-2026-41089 (CVSS 9.8) in Windows Netlogon is actively exploited. No credentials. Full domain takeover. Belgium's CCB issued emergency warning. Patch domain controllers RIGHT NOW.", "creation_timestamp": "2026-06-03T18:19:21.601517Z"}, {"uuid": "6092374d-7c85-4c99-a8ff-30e227386974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnfp6d3ywc2z", "content": "2/ \u26a0\ufe0f URGENT. CVE-2026-41089 (CVSS 9.8) in Windows Netlogon is actively exploited. No credentials. Full domain takeover. Belgium's CCB issued emergency warning. Patch domain controllers RIGHT NOW.", "creation_timestamp": "2026-06-03T18:19:23.241747Z"}, {"uuid": "54235984-950b-4a90-842a-197908975ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnfp6d3ywd2z", "content": "2/ \u26a0\ufe0f URGENT. CVE-2026-41089 (CVSS 9.8) in Windows Netlogon is actively exploited. No credentials. Full domain takeover. Belgium's CCB issued emergency warning. Patch domain controllers RIGHT NOW.", "creation_timestamp": "2026-06-03T18:21:40.267526Z"}, {"uuid": "1ffd5045-4eda-4628-b9a0-9d07887890d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnfp6d3ywe2z", "content": "2/ \u26a0\ufe0f URGENT. CVE-2026-41089 (CVSS 9.8) in Windows Netlogon is actively exploited. No credentials. Full domain takeover. Belgium's CCB issued emergency warning. Patch domain controllers RIGHT NOW.", "creation_timestamp": "2026-06-03T18:21:41.322793Z"}, {"uuid": "40d545e6-f448-468b-acb8-25a76bc31184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://t.me/xakep_ru/19472", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows Netlogon\n\n\u0411\u0435\u043b\u044c\u0433\u0438\u0439\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (Centre for Cybersecurity Belgium, CCB) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-41089 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Netlogon. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 Microsoft \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u0438\u0434\u044f\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439 \u044d\u0442\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c.\n\nhttps://xakep.ru/2026/06/03/netlogon-attacks/", "creation_timestamp": "2026-06-03T15:35:50.000000Z"}, {"uuid": "77ef3ab4-16d8-4f92-864e-0468392971c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87177", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-LongLogon\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ADScanPro\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-03 17:26:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated, non-destructive precondition checker for CVE-2026-41089 (Netlogon long-domain stack buffer overflow). Tells you if a DC's domain is long enough to overflow \u2014 without crashing it.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-03T18:00:04.000000Z"}, {"uuid": "87df2802-da25-4104-8f95-3801a555df77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mngco4e55c2h", "content": "Windows Netlogon\u306e\u8106\u5f31\u6027\u304c\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306b\u60aa\u7528(CVE-2026-41089)\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-03T23:55:10.121382Z"}, {"uuid": "892a05ee-f1e4-445f-bada-7ab248da78b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/S_E_Reborn/6394", "content": "\u0411\u0435\u043b\u044c\u0433\u0438\u0439\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CCB) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0439, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows Netlogon \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nMicrosoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-41089 (CVSS 9.8) \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043c\u0430\u0439\u0441\u043a\u043e\u0433\u043e PatchTuesday, \u043e\u043f\u0438\u0441\u0430\u0432 \u0435\u0451 \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0441\u0442\u0435\u043a\u0430 \u0432 Windows Netlogon, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 Windows, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430. \n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 Netlogon, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCVE-2026-41089 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Windows Server, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e, Windows Server 2025.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e \u043e\u0442 12 \u043c\u0430\u044f, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 Windows Attack Research & Protection (WARP), \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c Microsoft, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430\u0447\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u044d\u0443\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CCB \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e\u043a\u0430 \u043d\u0438\u043a\u0430\u043a \u043d\u0435\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u043c\u043e\u043b\u0447\u0430\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 CVE-2026-41089.\n\n\u0412\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043c\u0438\u043a\u0440\u043e\u043c\u044f\u0433\u043a\u0438\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f Nightmare Eclipse, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u0438\u0442\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0437\u0430 \u043d\u0435\u0434\u043e\u0431\u0440\u043e\u0441\u043e\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0432 \u0441\u0432\u043e\u0438 \u0434\u043e\u0432\u043e\u0434\u044b \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438 \u043f\u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0443\u043b\u044f\u043c.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0430 \u0441 Microsoft \u0438 \u0437\u0430\u0432\u0443\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u0432 \u0430\u0434\u0440\u0435\u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u044b\u043f\u0430\u043b\u0438\u0441\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0441\u043b\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438 \u0438\u0437\u044b\u0441\u043a\u0430\u043d\u0438\u044f.\n\n\u0422\u0430\u043a \u0447\u0442\u043e Nightmare Eclipse \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Microsoft, \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 BitLocker \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u043e \u0438\u043c\u0435\u043d\u0438 JonasLyk.", "creation_timestamp": "2026-06-01T13:15:33.000000Z"}, {"uuid": "59f5ced2-ab4c-4c14-b2f8-4c0d4b5a3b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/116689907956459364", "content": "@wdormann https://github.com/0xABCD01/CVE-2026-41089/blob/main/poc.py#L234", "creation_timestamp": "2026-06-04T04:18:12.339170Z"}, {"uuid": "b20d3075-c98d-45d1-997d-6d0f1b6ced15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/sen-perimetered.bsky.social/post/3mnhf7xiznj25", "content": "CVE-2026-41089 \u2014 Windows Netlogon, CVSS 9.8, actively exploited (Belgium CCB).\n\nUnauthenticated stack overflow \u2192 RCE on domain controllers. Server 2012\u20132025 in scope.\n\nPatch is out. A half-patched forest is not a defensible state \u2014 all DCs, same window.", "creation_timestamp": "2026-06-04T10:13:32.632041Z"}, {"uuid": "080ecc60-88f3-4309-9b6d-eba8f5b7cbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41089", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/116691890157644163", "content": "@wdormann This writeup *seems* to make sense, were it not for the magic two letters in the TLD: https://aretiq.ai/research/vul260513-cve-2026-41089-microsoft-windows-netlogon-buildsamlogonresponse-stack-based-buffer-overflow-rce/", "creation_timestamp": "2026-06-04T12:42:18.759095Z"}, {"uuid": "fc26db37-b60e-49ff-8d65-59a724e248d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/116691909326433179", "content": "@wdormann From what I read in the writeup (and the sparse other sources), you need a long enough DNS name on the victim host to trigger the overflow. I think 54 chars or more? This github has a possible explanation why the PoC fails under most normal conditions: https://github.com/ADScanPro/CVE-2026-41089-LongLogon", "creation_timestamp": "2026-06-04T12:47:10.875590Z"}, {"uuid": "a6859885-201a-46ef-952e-d6fa98e4c7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116692084819803958", "content": "@christopherkunz I also tested another PoC and it was even more fake.  i.e. it didn't even create a CLDAP structure that made sense.\nI get that PoC||GTFO is a thing, but we've clearly entered a phase where it needs to be Verified PoC||GTFO.  \ud83e\udd26\u200d\u2642\ufe0f", "creation_timestamp": "2026-06-04T13:31:49.166065Z"}, {"uuid": "45455e32-2689-42ec-b790-34c0f0293719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41089", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mnht7h2hhq2r", "content": "And the second 9.8: Windows Netlogon CVE-2026-41089 \u2014 one packet \u2192 DC RCE on every Windows Server since 2012, exploited now. Detect non-DC Netlogon RPC sessions: https://www.dugganusa.com/post/windows-netlogon-cve-2026-41089-one-packet-to-your-domain-controller-every-windows-server-since-20", "creation_timestamp": "2026-06-04T14:23:48.462069Z"}, {"uuid": "bacc2d6c-c163-47cb-9a18-f64e5ee84e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41089", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/116692326268359320", "content": "@wdormann Of all the writeups, I think I like this one best, especially with it having a human name in the byline: https://adscanpro.com/blog/patch-diffing-cve-2026-41089-netlogon\"read advisories carefully before deciding how to allocate research time.\" made me chuckle.", "creation_timestamp": "2026-06-04T14:33:13.189200Z"}, {"uuid": "c3a2f2f3-f12d-4675-9841-c8aea9939984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116692370054132541", "content": "@christopherkunz @wdormann Here's a new one to take a look at. I haven't gone through it and can't vouch for its legitimacy, but y'all know what you're doing more than I do anyway: https://github.com/Vanquishermacdetach/CVE-2026-41089-509", "creation_timestamp": "2026-06-04T14:44:22.436745Z"}, {"uuid": "31b25828-9204-4760-8951-ee958bdfb301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87310", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-532\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Darkuoremember32\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 76  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 16:56:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-04T17:00:04.000000Z"}, {"uuid": "85ca1efe-231d-40c4-ac7e-ea54a077c19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87293", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-509\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Vanquishermacdetach\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 5  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 14:42:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-04T15:00:04.000000Z"}, {"uuid": "ba065627-e75e-4713-9869-4ec6282877c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87329", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VergeWarlord\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 20:02:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-04T20:02:55.000000Z"}, {"uuid": "76e9a12b-bb7a-43f5-97bf-1b71dca61d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87323", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-874\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Retrodraseparator\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 56  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 18:56:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-04T19:00:06.000000Z"}, {"uuid": "53e1070c-cf33-4001-9298-05bced0c2bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87322", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-646\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CrowEvaluate\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 56  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 18:59:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-04T19:00:04.000000Z"}, {"uuid": "0c5dc0cb-2340-4116-972a-42eead07cc5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87318", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-470\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Darkuoremember32\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 71  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 17:52:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-04T18:00:04.000000Z"}, {"uuid": "4de5fb93-34e6-4296-bdde-3d996434a0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87398", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-984\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sidechairmanblast\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-05 08:39:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-05T09:00:05.000000Z"}, {"uuid": "61856543-8d84-41c6-8bb4-bb33d90a8a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87394", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-699\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a System32manager\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-05 08:23:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-05T08:31:38.000000Z"}, {"uuid": "37075709-1b1a-4762-a353-f1c32a95702c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-686\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a GalleryJoiner\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-05 11:06:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-05T11:07:19.000000Z"}, {"uuid": "c505f602-4fc0-4643-82ac-e8586523eff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87410", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-552\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SkySmokeMoat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-05 10:27:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-05T11:00:04.000000Z"}, {"uuid": "46a1cf23-f9d4-4b56-8c6c-c3dc6c3ecd50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/hAogTto79Jt-ZuW6Hp_UeFLdQ6LmAiGRTnFY6xKkiQBfaYY", "content": "", "creation_timestamp": "2026-06-04T21:00:04.000000Z"}, {"uuid": "d95dae08-aba1-4aa1-8548-238c21df5a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/kE9cLUPBGVlQM0eKet2aE5O-03aGK7deKtr42pLnxraAufk", "content": "", "creation_timestamp": "2026-06-03T21:00:04.000000Z"}, {"uuid": "b22e27a4-58ea-46c5-9557-c957c01ee6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/5i-pTes7Ja_8Uhuw9wP6auiAd2fWyZYO3DYvaqIb_mREm_4", "content": "", "creation_timestamp": "2026-06-03T09:00:04.000000Z"}, {"uuid": "9fb676cd-0661-484a-803b-46802e05d289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87420", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-277\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Planetpliexpose\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-05 11:02:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-05T12:00:06.000000Z"}, {"uuid": "5b2f75d5-d95b-4a7f-a685-1ffcf2193e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/87531", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-Detector\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hnytgl\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 07:20:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u8fd9\u662f\u4e00\u4e2a\u7528\u4e8e\u9632\u5fa1\u5de1\u68c0\u7684 CVE-2026-41089 \u68c0\u6d4b\u811a\u672c\u3002\u8be5\u6f0f\u6d1e\u662f Microsoft \u5728 2026 \u5e74 5 \u6708\u5b89\u5168\u66f4\u65b0\u4e2d\u62ab\u9732\u7684 Windows Netlogon \u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-06T08:00:07.000000Z"}, {"uuid": "73ad5b8f-78d4-4aad-8f59-8384e4550fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41089", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mnnbw7okay2e", "content": "\ud83d\udce2 Exploitation active de CVE-2026-41089 : RCE critique dans Windows Netlogon\n\ud83d\udcdd ## \ud83d\udcf0 Contexte\n\nPubli\u00e9 le 1er juin 2026 par BleepingComputer, cet article rapp\u2026\nhttps://cyberveille.ch/posts/2026-06-06-exploitation-active-de-cve-2026-41089-rce-critique-dans-windows-netlogon/ #CVE_2026_33825 #Cyberveille", "creation_timestamp": "2026-06-06T18:30:22.934387Z"}, {"uuid": "f11b0dce-44a5-4ce2-8dcf-9e5eec6bcbf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mnrn2eexu22h", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-0257, CVE-2026-0826, CVE-2025-48595, CVE-2026-20245, CVE-2026-41089\nActors: Apt, Play, Ransomware\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-08T12:00:12.724761Z"}, {"uuid": "58b25080-132f-4961-ac5a-c254919fdffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mns2orxqel23", "content": "~Checkpoint~\nCheck Point's June 8th report highlights critical zero-days in Android, Cisco, and Windows Netlogon, alongside major breaches at DentaQuest and Dashlane.\n-\nIOCs: CVE-2025-48595, CVE-2026-20230, CVE-2026-41089\n-\n...", "creation_timestamp": "2026-06-08T16:04:16.273152Z"}, {"uuid": "4f0ebe9a-c92c-4a88-a88d-ae1b0f3f1e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3mnwdzui3de2h", "content": "\u2728 CVE-2026-20245 e CVE-2026-41089: zero-day Cisco SD-WAN e RCE su Netlogon sotto attacco attivo \nLeggi il blog: spcnet.it/cve-2026-202...", "creation_timestamp": "2026-06-10T09:02:10.946515Z"}, {"uuid": "efa44dc9-1862-4a6c-91d2-0db923ccca69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnwqa2o4zq2k", "content": "~Certeu~\nCritical Windows Netlogon RCE vulnerability (CVE-2026-41089) is actively exploited in the wild.\n-\nIOCs: CVE-2026-41089\n-\n#CVE202641089 #Netlogon #ThreatIntel", "creation_timestamp": "2026-06-10T12:40:24.148627Z"}, {"uuid": "490f44f6-16e8-4bcf-9832-8e6844f757e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41089", "type": "seen", "source": "https://bsky.app/profile/atlas-trading.bsky.social/post/3mo26we33hd2o", "content": "\ud83d\udea8 Heads up! The critical Windows Netlogon vulnerability CVE-2026-41089 is actively being exploited. Make sure your systems are patched to prevent unauthorized access! #CyberSecurity #InfoSec\n\nhttps://whois-secure.com/blog/windows-netlogon-vulnerability-cve-2026-41089-exploited", "creation_timestamp": "2026-06-11T21:41:23.274114Z"}, {"uuid": "e435db28-5eb5-42ff-b906-97f39af5d678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "Telegram/avQcqITCN0CdPqbu_zPd1c2U29MoQRx_NSjCudrYTZic4II", "content": "", "creation_timestamp": "2026-06-09T23:00:05.000000Z"}, {"uuid": "fb012a98-0050-45c5-a2ce-ccd61743d45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "Telegram/O_vzfgb5tpNhGc4dFY5yEuw_msb6z_Oos8ooFDoWVZhaadQ", "content": "", "creation_timestamp": "2026-06-05T15:00:07.000000Z"}, {"uuid": "2973a060-569f-4bdf-84e3-ab25273069ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "Telegram/JHG8zP7qXaf1JIIuvE9VKZ77ce8tH_i-fBPcLNZTDpaUFkw", "content": "", "creation_timestamp": "2026-06-06T15:00:07.000000Z"}, {"uuid": "56cca46b-8698-4017-b46b-be0f9229d66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "Telegram/LhIaoh3_gVTYhhCtIaB2hHXuGQagt5GRqp2XlP3YfDwVpSU", "content": "", "creation_timestamp": "2026-06-06T21:00:04.000000Z"}, {"uuid": "2fc019cd-75bf-4350-aad0-b0ccd4ea4bc9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f6fe5d8a-3c7c-46e1-96e0-65613a11ec61", "content": "", "creation_timestamp": "2026-06-19T12:45:11.374571Z"}, {"uuid": "56a6e6e8-3bb9-4678-ad78-30daaf36c123", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc955ab8-c2b2-4072-ab9e-ecc2b31353a0", "content": "", "creation_timestamp": "2026-06-23T14:03:02.968957Z"}, {"uuid": "e68356f9-3787-4cec-bd98-44ce6ef0e2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88053", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-latest\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Coasttruvitalize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-09 15:59:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T11:00:03.939696Z"}, {"uuid": "c27d0f0f-6c95-44b0-b9c0-78bc1744daff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87607", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-245\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CrimsonKingfisher\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 15:40:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T12:00:04.426766Z"}, {"uuid": "9787868f-4972-4259-b506-6217625fc7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87606", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-706\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a RoyalViceroyBear\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 15:48:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T12:00:04.467588Z"}, {"uuid": "950710d8-e3b1-4819-aa15-611e2417e3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://t.me/kasperskyb2b/2207", "content": "\u23ed  \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udc4e \u0421\u043a\u0443\u0447\u0430\u043b\u0438 \u043f\u043e Mini Shai-Hulud? \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 npm-\u043f\u0430\u043a\u0435\u0442\u044b Red Hat \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u044d\u0442\u043e\u0439 \u0437\u0430\u0440\u0430\u0437\u044b, Miasma.\n\n\ud83d\udd34 APT HazyBeacon/CL-STA-1020 \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u042e\u0412\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0430\u043b\u043e\u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u04212 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 AWS Lambda.\n\n\ud83d\udccc \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 MiniPlasma (LPE \u0432 Windows), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u043f\u0430\u0442\u0447\u0430.\n\n\u2708\ufe0f \u0423\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0431\u0438\u0440\u0436\u0438, \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0431\u044b\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u044f\u0449\u0438\u043a\u0435. \u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430, \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043d\u0435\u043c\u043d\u043e\u0433\u0443 \u0442\u0430\u0449\u0438\u043b\u0438 5 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\ud83d\udc6e\u200d\u2640\ufe0f \u0422\u0430\u043a\u0442\u0438\u043a\u0438 \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 ShinyHunters, \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0438\u0435\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043f\u043e\u0445\u043e\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u0430\u0434\u0438\u043b\u0438 \u043d\u0430 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0443\u044e \u0438 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0443\u044e \u043f\u043e\u0447\u0432\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0437 TA4922. \u0413\u0440\u0443\u043f\u043f\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u0443\u0435\u0442 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0412\u041f\u041e (Atlas, Winos 4.0, RomulusLoader). \n\n\ud83d\udfe2\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0412\u041f\u041e FlutterShell, \u044d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0434\u043b\u044f macOS.\n\n\ud83d\udd0e CVE-2026-41089 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Windows Netlogon (CVSS 9.8), \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0439 \u0432 \u043c\u0430\u0439\u0441\u043a\u043e\u043c Patch Tuesday, \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u0445.\n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b (PhaaS) Kali365, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0434\u043e\u0431\u0430\u0432\u043e\u043a \u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0443\u0447\u0451\u0442\u043e\u043a M365 \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u043e\u043c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u044b \u0438 \u0441\u043e\u0446\u0441\u0435\u0442\u0438.\n\n\ud83e\uddcc \u041c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u043e\u0432  RemusStealer, AnimateClipper \u0438 SessionGate  \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0441\u0430\u0439\u0442\u044b \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0418\u0411 Ghidra \u0438 dnSpy.  \n\n\ud83d\udfe2\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u043e\u044f\u043d\u0441\u043a\u043e\u0433\u043e \u0412\u041f\u041e Argamal, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0438\u0433\u0440.\n\n\ud83d\udd35\u0421\u0440\u0435\u0434\u0438 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 2025 \u0433\u043e\u0434\u0443, 10% \u0431\u044b\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438. \u0411\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u043d\u043e\u0432\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0432 \u0437\u043e\u043d\u0430\u0445 .mobi \u0438 .top.\n\n\ud83d\udd35\u0411\u043e\u043b\u0435\u0435 5000 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043c\u0430\u0440\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0435\u0431-\u0441\u043a\u0438\u043c\u043c\u0435\u0440 medusa.js \u0434\u043b\u044f \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd34\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0443\u0447\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u043c\u0430\u043d\u044b\u0432\u0430\u0442\u044c \u0418\u0418-\u0431\u043e\u0442\u0430 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u0442\u043a\u043e\u0439 Meta \u0438 \u0443\u0433\u043e\u043d\u044f\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Instagram, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u0435\u0436\u043b\u0438\u0432\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u043e\u0439 email. \ud83e\udd2f\n\n\ud83e\udd16 \u0411\u043e\u0442-\u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u043a\u0438\u0439, \u0435\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c Cloudflare. \u0412\u0441\u0451 \u0438\u0437-\u0437\u0430 \u0418\u0418, \u043a\u043e\u043d\u0435\u0447\u043d\u043e.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-07-12T12:00:04.542383Z"}, {"uuid": "0353306e-3fb6-4a96-93c5-05e8d415f572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2977", "content": "CVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\nhttps://github.com/0xABCD01/CVE-2026-41089", "creation_timestamp": "2026-07-12T12:00:05.399412Z"}, {"uuid": "d36cd42a-403b-4c69-8d3b-1f6914e6d640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87545", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-274\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Fuchsiafromcurl\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 10:47:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.331622Z"}, {"uuid": "0402679c-8c70-4aa6-8947-795f28b783cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87552", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-191\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Mapclaregister\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 11:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.752920Z"}, {"uuid": "daadb5d8-e7bc-4c3a-ab2e-e2af13fe7578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87593", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-637\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NodeRetrieve\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 14:18:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.801821Z"}, {"uuid": "cc674dd4-e020-42a0-b045-556ea80a4106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87592", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-986\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a StampDreamFitting\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 14:18:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.842653Z"}, {"uuid": "9478db34-f6f6-459b-bdce-84d8c260ecef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87588", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-334\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a segmentjoninsecret\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 14:03:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.949285Z"}, {"uuid": "7358a8d2-85f2-41a6-9792-ce672b683f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87579", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-224\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a raingatorrouter\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 13:43:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.987135Z"}, {"uuid": "5afbbd94-6dae-42b0-b87f-246af69dc13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87593", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-637\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NodeRetrieve\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 14:18:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:43.847765Z"}, {"uuid": "ad0acc37-3fee-467a-b21d-11aac29d5f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87592", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-986\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a StampDreamFitting\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 14:18:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:43.890559Z"}, {"uuid": "3f9a7b6b-3a67-460c-a418-9d1aec84097b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87588", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-334\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a segmentjoninsecret\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 14:03:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:44.011657Z"}, {"uuid": "de82d48f-ca3f-4d92-868e-016315b76795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87579", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-224\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a raingatorrouter\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 13:43:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:44.051891Z"}, {"uuid": "91fa193f-c646-4da0-b9de-c1ffdefc449c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87552", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-191\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Mapclaregister\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 11:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:43.808327Z"}, {"uuid": "5470c126-4a75-48c6-aa31-bbe22d3a4977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87545", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-274\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Fuchsiafromcurl\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 10:47:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:42.649556Z"}, {"uuid": "6907d257-1b4e-4aaf-9631-0e067c0bcf54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88053", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-latest\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Coasttruvitalize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-09 15:59:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:45.630977Z"}, {"uuid": "a7d13f7c-40c3-488d-bda1-c2dadffbffde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://t.me/kasperskyb2b/2207", "content": "\u23ed  \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udc4e \u0421\u043a\u0443\u0447\u0430\u043b\u0438 \u043f\u043e Mini Shai-Hulud? \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 npm-\u043f\u0430\u043a\u0435\u0442\u044b Red Hat \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u044d\u0442\u043e\u0439 \u0437\u0430\u0440\u0430\u0437\u044b, Miasma.\n\n\ud83d\udd34 APT HazyBeacon/CL-STA-1020 \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u042e\u0412\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0430\u043b\u043e\u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u04212 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 AWS Lambda.\n\n\ud83d\udccc \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 MiniPlasma (LPE \u0432 Windows), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u043f\u0430\u0442\u0447\u0430.\n\n\u2708\ufe0f \u0423\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0431\u0438\u0440\u0436\u0438, \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0431\u044b\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u044f\u0449\u0438\u043a\u0435. \u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430, \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043d\u0435\u043c\u043d\u043e\u0433\u0443 \u0442\u0430\u0449\u0438\u043b\u0438 5 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\ud83d\udc6e\u200d\u2640\ufe0f \u0422\u0430\u043a\u0442\u0438\u043a\u0438 \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 ShinyHunters, \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0438\u0435\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043f\u043e\u0445\u043e\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u0430\u0434\u0438\u043b\u0438 \u043d\u0430 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0443\u044e \u0438 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0443\u044e \u043f\u043e\u0447\u0432\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0437 TA4922. \u0413\u0440\u0443\u043f\u043f\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u0443\u0435\u0442 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0412\u041f\u041e (Atlas, Winos 4.0, RomulusLoader). \n\n\ud83d\udfe2\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0412\u041f\u041e FlutterShell, \u044d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0434\u043b\u044f macOS.\n\n\ud83d\udd0e CVE-2026-41089 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Windows Netlogon (CVSS 9.8), \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0439 \u0432 \u043c\u0430\u0439\u0441\u043a\u043e\u043c Patch Tuesday, \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u0445.\n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b (PhaaS) Kali365, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0434\u043e\u0431\u0430\u0432\u043e\u043a \u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0443\u0447\u0451\u0442\u043e\u043a M365 \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u043e\u043c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u044b \u0438 \u0441\u043e\u0446\u0441\u0435\u0442\u0438.\n\n\ud83e\uddcc \u041c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u043e\u0432  RemusStealer, AnimateClipper \u0438 SessionGate  \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0441\u0430\u0439\u0442\u044b \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0418\u0411 Ghidra \u0438 dnSpy.  \n\n\ud83d\udfe2\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u043e\u044f\u043d\u0441\u043a\u043e\u0433\u043e \u0412\u041f\u041e Argamal, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0438\u0433\u0440.\n\n\ud83d\udd35\u0421\u0440\u0435\u0434\u0438 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 2025 \u0433\u043e\u0434\u0443, 10% \u0431\u044b\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438. \u0411\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u043d\u043e\u0432\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0432 \u0437\u043e\u043d\u0430\u0445 .mobi \u0438 .top.\n\n\ud83d\udd35\u0411\u043e\u043b\u0435\u0435 5000 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043c\u0430\u0440\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0435\u0431-\u0441\u043a\u0438\u043c\u043c\u0435\u0440 medusa.js \u0434\u043b\u044f \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd34\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0443\u0447\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u043c\u0430\u043d\u044b\u0432\u0430\u0442\u044c \u0418\u0418-\u0431\u043e\u0442\u0430 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u0442\u043a\u043e\u0439 Meta \u0438 \u0443\u0433\u043e\u043d\u044f\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Instagram, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u0435\u0436\u043b\u0438\u0432\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u043e\u0439 email. \ud83e\udd2f\n\n\ud83e\udd16 \u0411\u043e\u0442-\u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u043a\u0438\u0439, \u0435\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c Cloudflare. \u0412\u0441\u0451 \u0438\u0437-\u0437\u0430 \u0418\u0418, \u043a\u043e\u043d\u0435\u0447\u043d\u043e.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-07-13T00:00:44.509323Z"}, {"uuid": "515dd5e5-e6c6-4144-a8c7-008cbaa032ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87607", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-245\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CrimsonKingfisher\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 15:40:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:44.406085Z"}, {"uuid": "94dd4ca0-42ea-4c38-8e43-237d7c25162b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87606", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-706\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a RoyalViceroyBear\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 15:48:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T01:00:23.794888Z"}, {"uuid": "a9907857-803b-4b7a-8508-1da2325b3516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2977", "content": "CVE-2026-41089 PoC \u2014 Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)\n\nhttps://github.com/0xABCD01/CVE-2026-41089", "creation_timestamp": "2026-07-13T01:00:24.766726Z"}, {"uuid": "d003dbcc-d561-4ab2-a4bb-1074cab16ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41087", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:35.176563Z"}, {"uuid": "a2385c5d-70fb-42fa-a5b4-d4283fe69084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41087", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:51.705357Z"}, {"uuid": "32305c28-a692-4f38-8d9b-cf05996bec7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41087", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:16.725287Z"}, {"uuid": "8360e299-1a59-4ea2-a896-44aef56ca823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41087", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:22.292628Z"}, {"uuid": "9e079716-3d86-487a-9b7b-e1030a0156e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/bhaveshverma.com/post/3mqonpusmgk26", "content": "Microsoft patched CVE-2026-41089 in the May 12 Patch Tuesday release as one of 118 vulnerabilities addressed that month. A quick read:\n\nsubstack.com/@alphacyberl...", "creation_timestamp": "2026-07-15T11:49:53.266431Z"}, {"uuid": "b317f17c-5957-4017-b9fe-16f1a8ee703e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/information_security_channel/55332", "content": "Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs\nhttps://www.securityweek.com/critical-windows-netlogon-vulnerability-in-attackers-crosshairs/\n\nOrganizations are advised to patch CVE-2026-41089 as soon as possible, given its severity, the potential ongoing exploitation.\nThe post Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs (https://www.securityweek.com/critical-windows-netlogon-vulnerability-in-attackers-crosshairs/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:06.663331Z"}, {"uuid": "1f46f296-a9d4-4120-96c5-37a9fa057ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/information_security_channel/55332", "content": "Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs\nhttps://www.securityweek.com/critical-windows-netlogon-vulnerability-in-attackers-crosshairs/\n\nOrganizations are advised to patch CVE-2026-41089 as soon as possible, given its severity, the potential ongoing exploitation.\nThe post Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs (https://www.securityweek.com/critical-windows-netlogon-vulnerability-in-attackers-crosshairs/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.003568Z"}, {"uuid": "2dbf712f-c4ec-4f68-b9a5-665f0cb79583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41087", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:46:59.137390Z"}, {"uuid": "61c213af-1ffd-4de3-86fb-701e7d1ccffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "content": "", "creation_timestamp": "2026-07-16T19:00:13.963349Z"}, {"uuid": "99dbf206-c240-4593-a215-cb40f27ce523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "content": "", "creation_timestamp": "2026-07-17T00:00:30.253485Z"}, {"uuid": "30e673c7-10c6-4f44-abb5-6bc3f3adaa6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "content": "", "creation_timestamp": "2026-07-18T00:00:42.519647Z"}, {"uuid": "6e516ac3-012a-4ee4-8723-544935066673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/94403", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-Netlogon-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HydraSoft\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 02:05:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T03:00:03.844258Z"}, {"uuid": "a47b1fdd-6433-4060-93f2-290877af0a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/3000", "content": "\u2728 CVE-2026-20245 e CVE-2026-41089: zero-day Cisco SD-WAN e RCE su Netlogon sotto attacco attivo\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-20245-e-cve-2026-41089-zero-day-cisco-sd-wan-e-rce-su-netlogon-sotto-attacco-attivo/", "creation_timestamp": "2026-07-21T04:00:08.258918Z"}, {"uuid": "128704ca-e637-44c4-8fb7-a4577f6b67d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/3000", "content": "\u2728 CVE-2026-20245 e CVE-2026-41089: zero-day Cisco SD-WAN e RCE su Netlogon sotto attacco attivo\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-20245-e-cve-2026-41089-zero-day-cisco-sd-wan-e-rce-su-netlogon-sotto-attacco-attivo/", "creation_timestamp": "2026-07-22T00:00:31.933407Z"}, {"uuid": "02ff401d-4b79-4177-b09c-cb9be8ca8be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94403", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-Netlogon-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HydraSoft\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 02:05:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-22T00:00:31.359921Z"}, {"uuid": "10345b02-7199-4322-98a2-3b40273c96c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/nZl5UlvWmDfGnVyzuctdLXeNPSthYrXPLlU07drZckp1EYQ", "content": "", "creation_timestamp": "2026-07-22T17:00:05.609898Z"}, {"uuid": "7627f326-89e3-429b-ada3-a3db8eb3dcb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "content": "", "creation_timestamp": "2026-07-22T22:00:03.554852Z"}, {"uuid": "e51b03d1-ecf5-45ad-ac9e-856242a63229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "content": "", "creation_timestamp": "2026-07-23T00:00:05.013643Z"}, {"uuid": "478df03f-cc61-4665-878b-2933910747e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "Telegram/nZl5UlvWmDfGnVyzuctdLXeNPSthYrXPLlU07drZckp1EYQ", "content": "", "creation_timestamp": "2026-07-23T00:00:08.869830Z"}, {"uuid": "08dc4a10-ad36-4d76-80d5-7e1e5f449874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/GithubRedTeam/94675", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-Netlogon-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a opensource-arrozconpollo191\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 15:43:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.746820Z"}, {"uuid": "b4baf087-2ddb-416a-bd9d-de470fe6e557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94675", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41089-Netlogon-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a opensource-arrozconpollo191\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 15:43:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:11.764535Z"}, {"uuid": "1ca96288-3f90-4bf8-b3be-2c42a5d6e4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://bsky.app/profile/ebibibibibibi.bsky.social/post/3mrhfmhrcwm26", "content": "https://www.ebisuda.net/tech/2026/07/14/microsoft-entra-idsmsmfa20272-microsoft-to-stop-providing-telephony-based-authen/\n3. Windows Netlogon\u306b\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\uff08CVE-2026-41089\uff09\u2014\u2014\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u3078\u306e...", "creation_timestamp": "2026-07-25T08:01:18.642405Z"}, {"uuid": "04ac36e9-44c1-41f0-b454-e764fae00e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://t.me/ZerodayAlert/722", "content": "Netlogon \u0434\u0430\u043b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u0443\u0442\u044c \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u043c \u0434\u043e\u043c\u0435\u043d\u0430 Windows Server\n\n\u0411\u0435\u043b\u044c\u0433\u0438\u0439\u0441\u043a\u0438\u0439 \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e CVE-2026-41089 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0420\u0435\u0447\u044c \u043d\u0435 \u043e \u0432\u0442\u043e\u0440\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435, \u0430 \u043e Windows Netlogon, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows Server, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Windows Server 2025.\n\n\u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0439: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0442\u043e\u0438\u0442 \u0432 \u0446\u0435\u043d\u0442\u0440\u0435 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432. \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d, \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0442\u0447 \u0437\u0434\u0435\u0441\u044c \u043f\u043b\u043e\u0445\u0430\u044f \u0438\u0434\u0435\u044f, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u0443\u044e \u043e\u0445\u043e\u0442\u0443 \u043d\u0430 \u0434\u043e\u043c\u0435\u043d\u044b. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043c\u0430\u0439\u0441\u043a\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0410 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0434\u043e\u043c\u0435\u043d\u0430 \u043b\u0443\u0447\u0448\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n#WindowsServer #Netlogon #CVE #RCE \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.477477Z"}]}