Vulnerability-Lookup

CVE-2026-62715 (GCVE-0-2026-62715)

Vulnerability from cvelistv5 – Published: 2026-08-11 17:04 – Updated: 2026-08-12 17:54

Title

Windows DHCP Server Information Disclosure Vulnerability

Summary

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-12 15:24 UTC

CWE

CWE-191 - Integer Underflow (Wrap or Wraparound)
CWE-125 - Out-of-bounds Read

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

11 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.9418 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.9115 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.23338 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.23338 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.9418 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.9418 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.9115 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.9115 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.5499 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.33296 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.33296 (custom)

Date Public

2026-08-11 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-62715",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-12T15:24:12.515472Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-12T15:25:38.554Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.9418",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.9115",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.23338",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.23338",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.9418",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.9418",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.9115",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.9115",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.5499",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.33296",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.33296",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.9115",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.9115",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.9115",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.5499",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.33296",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.33296",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.9418",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.9418",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.9418",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.23338",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.23338",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-11T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
              "lang": "en-US",
              "type": "CWE"
            },
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:54:33.747Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows DHCP Server Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62715"
        }
      ],
      "title": "Windows DHCP Server Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-62715",
    "datePublished": "2026-08-11T17:04:09.250Z",
    "dateReserved": "2026-07-14T20:58:12.786Z",
    "dateUpdated": "2026-08-12T17:54:33.747Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-62715",
      "date": "2026-08-12",
      "epss": "0.00491",
      "percentile": "0.39788"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-62715\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2026-08-11T17:18:21.843\",\"lastModified\":\"2026-08-12T16:17:10.897\",\"vulnStatus\":\"Undergoing Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.\"}],\"affected\":[{\"source\":\"secure@microsoft.com\",\"affectedData\":[{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9115\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23338\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23338\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9115\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9115\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5499\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33296\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33296\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-12T15:24:12.515472Z\",\"id\":\"CVE-2026-62715\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"},{\"lang\":\"en\",\"value\":\"CWE-191\"}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62715\",\"source\":\"secure@microsoft.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-62715\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-12T15:24:12.515472Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-12T15:24:18.650Z\"}}], \"cna\": {\"title\": \"Windows DHCP Server Information Disclosure Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1607\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.9418\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1809\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.9115\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.23338\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.23338\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.9418\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.9418\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.9115\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.9115\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.20348.0\", \"lessThan\": \"10.0.20348.5499\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.33296\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.33296\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}], \"datePublic\": \"2026-08-11T14:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62715\", \"name\": \"Windows DHCP Server Information Disclosure Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-191\", \"description\": \"CWE-191: Integer Underflow (Wrap or Wraparound)\"}, {\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"CWE-125: Out-of-bounds Read\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.9115\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.9115\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.9115\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.20348.5499\", \"versionStartIncluding\": \"10.0.20348.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.33296\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.33296\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.9418\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.9418\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.9418\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.23338\", \"versionStartIncluding\": \"6.3.9600.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.23338\", \"versionStartIncluding\": \"6.3.9600.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-08-12T14:47:22.600Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-62715\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-12T15:25:38.554Z\", \"dateReserved\": \"2026-07-14T20:58:12.786Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2026-08-11T17:04:09.250Z\", \"assignerShortName\": \"microsoft\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-1001

Vulnerability from certfr_avis - Published: 2026-08-12 - Updated: 2026-08-12

De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Microsoft indique que la vulnérabilité CVE-2026-68820 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Microsoft	N/A	Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.9418
Microsoft	N/A	Windows App Client pour Windows Desktop versions antérieures à 2.0.1193.0
Microsoft	N/A	Windows Server 2019 versions antérieures à 10.0.17763.8880
Microsoft	N/A	Windows Server 2019 versions antérieures à 10.0.17763.9115
Microsoft	N/A	Windows 11 Version 25H2 pour systèmes x64 versions antérieures à 10.0.26200.9165
Microsoft	N/A	Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26100.9165
Microsoft	N/A	Windows Server 2016 versions antérieures à 10.0.14393.9234
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.7663
Microsoft	N/A	Windows App Client pour Windows Desktop versions antérieures à 2.0.1314.0
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.7663
Microsoft	N/A	Windows Server 2012 versions antérieures à 6.2.9200.26132
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.7417
Microsoft	N/A	Windows 11 Version 26H1 pour systèmes ARM64 versions antérieures à 10.0.28000.2704
Microsoft	N/A	Windows Server 2025 (Server Core installation) versions antérieures à 10.0.26100.33296
Microsoft	N/A	Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.9115
Microsoft	N/A	Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.9115
Microsoft	N/A	Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.5440
Microsoft	N/A	Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.8880
Microsoft	N/A	Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.9234
Microsoft	N/A	Windows Server 2025 versions antérieures à 10.0.26100.33222
Microsoft	N/A	Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26000.9106
Microsoft	N/A	Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.8880
Microsoft	N/A	Windows Server 2025 (Server Core installation) versions antérieures à 10.0.26100.33222
Microsoft	N/A	Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.9418
Microsoft	N/A	Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.26132
Microsoft	N/A	Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.9115
Microsoft	N/A	Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.9234
Microsoft	N/A	Windows Server 2022 versions antérieures à 10.0.20348.5440
Microsoft	N/A	Windows Server 2025 versions antérieures à 10.0.26100.33296
Microsoft	N/A	Windows Server 2016 versions antérieures à 10.0.14393.9418
Microsoft	N/A	Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.7517
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.7663
Microsoft	N/A	Windows 11 Version 26H1 pour systèmes ARM64 versions antérieures à 10.0.28000.2269
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.7417
Microsoft	N/A	Windows 11 version 26H1 pour systèmes x64 antérieures à 10.0.28000.2704
Microsoft	N/A	Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.23228
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.7417
Microsoft	N/A	Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.7517
Microsoft	N/A	Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.5499
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.7417
Microsoft	N/A	Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.9234
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.7663
Microsoft	N/A	Windows 11 Version 25H2 pour systèmes ARM64 versions antérieures à 10.0.26100.9106
Microsoft	N/A	Windows Server 2012 versions antérieures à 6.2.9200.26280
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.7663
Microsoft	N/A	Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.26280
Microsoft	N/A	Windows 11 Version 25H2 pour systèmes x64 versions antérieures à 10.0.26100.9106
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.7417
Microsoft	N/A	Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.9418
Microsoft	N/A	Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.8880
Microsoft	N/A	Windows Server 2022 versions antérieures à 10.0.20348.5499
Microsoft	N/A	Windows 11 Version 25H2 pour systèmes ARM64 versions antérieures à 10.0.26200.9165
Microsoft	N/A	Windows Server 2012 R2 versions antérieures à 6.3.9600.23228
Microsoft	N/A	Windows Server 2012 R2 versions antérieures à 6.3.9600.23338
Microsoft	N/A	Windows 11 version 26H1 pour systèmes x64 antérieures à 10.0.28000.2269
Microsoft	N/A	Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.9165
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.7663
Microsoft	N/A	Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.23338
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.7417
Microsoft	N/A	Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.9106

References

Title

Publication Time

GHSA-RPCH-9PG9-35R7

Vulnerability from github – Published: 2026-08-11 18:31 – Updated: 2026-08-11 18:31

Details

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Severity

6.5 (Medium)


                  
                    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-62715"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-125"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-11T17:18:21Z",
    "severity": "MODERATE"
  },
  "details": "Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.",
  "id": "GHSA-rpch-9pg9-35r7",
  "modified": "2026-08-11T18:31:14Z",
  "published": "2026-08-11T18:31:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62715"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62715"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0284

Vulnerability from csaf_ncscnl - Published: 2026-08-11 19:47 - Updated: 2026-08-11 19:47

Summary

Kwetsbaarheden verholpen in Microsoft Windows

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows.

Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade, zoals genoemd in onderstaande tabel. De ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem. Naast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek. Door de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten. ``` Windows Accessibility Infrastructure (ATBroker.exe): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Kernel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-54113 | 7.50 | Denial-of-Service | | CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten | | CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Hello: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61928 | 5.50 | Manipulatie van gegevens | |----------------|------|-------------------------------------| Windows Schannel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel | |----------------|------|-------------------------------------| AMD Zen: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens | | CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Secure Socket Tunneling Protocol (SSTP): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Remote Access API: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Win32K: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Autopilot: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Routing and Remote Access Service (RRAS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Common Log File System Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Remote Desktop Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft QUIC: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Installer: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Network Address Translation (NAT): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker | |----------------|------|-------------------------------------| Windows Storage Port Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows NTFS: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens | | CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| User-Mode Power Service (UMPS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Bind Filter Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Virtual Hard Disk (VHD) Miniport Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Narrator Braille: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft Remote Registry Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59138 | 6.50 | Denial-of-Service | | CVE-2026-61345 | 6.50 | Denial-of-Service | |----------------|------|-------------------------------------| Windows Key Guard: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows RPC API: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows User Profile Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Telephony Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Capability Access Management Service (camsvc): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Imaging Component: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code | | CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Message Queuing: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Defender Firewall Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel | |----------------|------|-------------------------------------| RPC Runtime: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Program Compatibility Assistant Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Active Directory: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code | | CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel | |----------------|------|-------------------------------------| Windows Shell: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows LUAFV: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows TCP/IP: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59132 | 7.50 | Denial-of-Service | | CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Device Association Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Storage: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows GDI: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Kerberos: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Cross Device Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Deployment Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows GDI+: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code | | CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows iSCSI Target Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-65681 | 7.50 | Denial-of-Service | | CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code | | CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code | | CVE-2026-65796 | 5.90 | Denial-of-Service | |----------------|------|-------------------------------------| Windows Encrypting File System (EFS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Application Information Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Container Isolation FS Filter Driver (unionfs.sys): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Microsoft Local Security Authority Server (lsasrv): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows TPM: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-6727 | 5.90 | Toegang tot gevoelige gegevens | | CVE-2026-6726 | 7.90 | Voordoen als andere gebruiker | |----------------|------|-------------------------------------| Windows USB Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Projected File System: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows LDAP - Lightweight Directory Access Protocol: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code | | CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Universal Disk Format File System Driver (UDFS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Backup Engine: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Cloud Files Mini Filter Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Management Instrumentation: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Microsoft Azure Attestation service and Device Health Attestation Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code | | CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Push Notifications: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Remote Desktop Client: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code | | CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code | | CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code | | CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft High Performance Computing (HPC) Pack: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code | | CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft Windows Search Component: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Desktop Window Manager: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows SMB Client: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows DNS: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code | | CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code | | CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code | | CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code | | CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code | | CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code | | CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten | | CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Network File System: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-68819 | 5.90 | Denial-of-Service | |----------------|------|-------------------------------------| Windows HTTP.sys: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Display Enhancement Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows SMB Server: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code | | CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Reliable Multicast Transport Driver (RMCAST): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Management Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-70348 | 5.50 | Denial-of-Service | |----------------|------|-------------------------------------| Windows HTTP Protocol Stack: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62750 | 6.50 | Manipulatie van gegevens | |----------------|------|-------------------------------------| Windows Graphics Kernel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-62702 | 6.80 | Denial-of-Service | | CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Event Logging Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Sensor Data Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Winlogon: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Work Folder Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Ancillary Function Driver for WinSock: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Modern Device Management (MDM): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft COM for Windows: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Network Connection Broker: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows License Manager: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Wired AutoConfig Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows DWM Core Library: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Hyper-V: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Microsoft Digest Authentication: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows MIDI Service Module: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows DHCP Client: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code | | CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-65785 | 6.50 | Denial-of-Service | | CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Remote Access Connection Manager: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Active Directory Certificate Services (AD CS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows DHCP Server: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| ```

Oplossingen: Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op: https://portal.msrc.microsoft.com/en-us/security-guidance

Kans: medium

Schade: high

CWE-20: Improper Input Validation

CWE-59: Improper Link Resolution Before File Access ('Link Following')

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-121: Stack-based Buffer Overflow

CWE-122: Heap-based Buffer Overflow

CWE-125: Out-of-bounds Read

CWE-126: Buffer Over-read

CWE-187: Partial String Comparison

CWE-190: Integer Overflow or Wraparound

CWE-191: Integer Underflow (Wrap or Wraparound)

CWE-197: Numeric Truncation Error

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-208: Observable Timing Discrepancy

CWE-250: Execution with Unnecessary Privileges

CWE-284: Improper Access Control

CWE-306: Missing Authentication for Critical Function

CWE-312: Cleartext Storage of Sensitive Information

CWE-326: Inadequate Encryption Strength

CWE-346: Origin Validation Error

CWE-347: Improper Verification of Cryptographic Signature

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-400: Uncontrolled Resource Consumption

CWE-415: Double Free

CWE-416: Use After Free

CWE-426: Untrusted Search Path

CWE-427: Uncontrolled Search Path Element

CWE-476: NULL Pointer Dereference

CWE-502: Deserialization of Untrusted Data

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-787: Out-of-bounds Write

CWE-822: Untrusted Pointer Dereference

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

CWE-862: Missing Authorization

CWE-863: Incorrect Authorization

CWE-908: Use of Uninitialized Resource

CWE-1220: Insufficient Granularity of Access Control

CWE-1390: Weak Authentication

CVE-2026-50472

A heap-based buffer overflow vulnerability in Windows LUAFV enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-56174

An untrusted search path vulnerability in Windows Narrator Braille allows an authorized local attacker to elevate privileges by exploiting improper path handling.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-426 - Untrusted Search Path

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-54113

A vulnerability in the Windows Kernel allows unauthorized attackers to cause a denial of service over a network by allocating resources without any limits or throttling.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-54984

A heap-based buffer overflow vulnerability in the Windows Imaging Component enables unauthorized local code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-49179

Improper neutralization of special elements in commands within Windows Active Directory allows unauthorized attackers to execute code remotely over a network, posing a significant security risk.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-6727

A timing side-channel vulnerability in the RSA OAEP decryption of TPM 2.0, identified as CVE-2026-6727, allows a privileged local attacker to potentially recover sensitive information and forge attestations, with Microsoft Windows updates addressing the issue.

5.9 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE-208 - Observable Timing Discrepancy

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59127

An integer overflow or wraparound vulnerability in Windows Installer enables an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59128

An out-of-bounds read vulnerability in the Windows Encrypting File System (EFS) allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59130

An issue in AMD Zen allows an authorized local attacker to disclose information without an assigned CWE identifier.

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59132

A null pointer dereference vulnerability in Windows TCP/IP stack allows unauthorized attackers to cause a denial of service over a network.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59135

A weak authentication vulnerability in the Microsoft Windows Search Component permits an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-1390 - Weak Authentication

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59134

A heap-based buffer overflow vulnerability in the Remote Desktop Client enables unauthorized attackers to execute arbitrary code remotely over a network.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59136

An uninitialized resource vulnerability in Microsoft COM for Windows allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE-908 - Use of Uninitialized Resource

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59137

A use of uninitialized resource vulnerability in the Windows Event Logging Service allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59138

A null pointer dereference vulnerability in Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61345

A null pointer dereference vulnerability in Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61346

A use-after-free vulnerability in the Windows Graphics Kernel allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61353

A heap-based buffer overflow vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61347

A buffer over-read vulnerability in the Windows Event Logging Service allows an authorized local attacker to disclose sensitive information by reading beyond allocated memory buffers.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-126 - Buffer Over-read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61348

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61350

A buffer over-read vulnerability in Windows NTFS allows unauthorized attackers to disclose information through physical access to the system.

4.6 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-126 - Buffer Over-read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61356

A missing authentication vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges, potentially compromising system security.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61367

A missing authentication vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges, potentially compromising system security.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61923

A heap-based buffer overflow vulnerability in the Windows Display Enhancement Service enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61366

A double free vulnerability in the Windows Network Connection Broker allows an authorized local attacker to elevate privileges by exploiting improper memory management.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-415 - Double Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61368

A heap-based buffer overflow vulnerability in Windows Hyper-V allows an authorized local attacker to disclose sensitive information.

5.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61924

An out-of-bounds read vulnerability in the Remote Desktop Client enables unauthorized attackers to disclose sensitive information over a network.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61925

An incorrect authorization vulnerability in Windows Installer allows an authorized local attacker to elevate privileges, potentially compromising system integrity.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-863 - Incorrect Authorization

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61928

Windows Hello stores sensitive information in cleartext, allowing an authorized local attacker to perform tampering with the stored data.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-312 - Cleartext Storage of Sensitive Information

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61930

A heap-based buffer overflow vulnerability in the Windows Kernel enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61937

An integer overflow or wraparound vulnerability in Windows HTTP.sys allows an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62692

A heap-based buffer overflow vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61932

A type confusion vulnerability in the Windows DWM Core Library allows an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61936

A missing authorization vulnerability in the Windows Defender Firewall Service allows an authorized local attacker to bypass a security feature.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-862 - Missing Authorization

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61939

A use-after-free vulnerability in Winlogon allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62690

A race condition in Windows Push Notifications due to improper synchronization of shared resources allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62696

An integer underflow vulnerability in the Windows Program Compatibility Assistant Service allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62699

A heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) enables unauthorized attackers with physical access to execute arbitrary code.

6.8 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62703

An out-of-bounds read vulnerability in the Windows DWM Core Library allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62707

A use-after-free vulnerability in Windows Modern Device Management (MDM) allows an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62713

A heap-based buffer overflow vulnerability in the Windows Cloud Files Mini Filter Driver enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62712

A heap-based buffer overflow vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62718

An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62715

An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62716

An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62719

A heap-based buffer overflow vulnerability in Windows Message Queuing enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62723

A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62724

A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62748

A race condition in the Windows Telephony Service caused by improper synchronization of shared resources allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62729

A race condition in the Windows Telephony Service caused by improper synchronization of shared resources allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62738

An out-of-bounds read vulnerability in Windows Management Instrumentation allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62746

A buffer over-read vulnerability in the Windows Win32K component allows an authorized local attacker to disclose sensitive information by reading beyond allocated memory bounds.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-126 - Buffer Over-read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62740

An uninitialized resource vulnerability in the Windows Imaging Component allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62753

A heap-based buffer overflow vulnerability in Windows HTTP.sys enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62735

A heap-based buffer overflow vulnerability in Windows HTTP.sys enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62739

A heap-based buffer overflow vulnerability in Windows HTTP.sys enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62742

An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62745

An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62747

A heap-based buffer overflow vulnerability in the Windows Device Association Service enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62750

A partial string comparison vulnerability in the Windows HTTP Protocol Stack allows unauthorized attackers on adjacent networks to tamper with transmitted data.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-187 - Partial String Comparison

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62754

A heap-based buffer overflow vulnerability in Windows Kerberos allows an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62783

A heap-based buffer overflow vulnerability in the Windows Remote Access Connection Manager allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62755

A stack-based buffer overflow vulnerability in the Windows DHCP Client allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62758

A heap-based buffer overflow vulnerability in the Windows Remote Access Connection Manager allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62773

A use-after-free vulnerability in Windows Kerberos allows an authorized local attacker to elevate privileges by exploiting improper memory handling.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62774

A use-after-free vulnerability in the Windows Graphics Kernel allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62785

A heap-based buffer overflow vulnerability in Windows LDAP enables unauthorized remote code execution by attackers over a network.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62777

A missing authentication vulnerability in a critical function of the Windows License Manager allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62792

A stack-based buffer overflow vulnerability in the Windows TCP/IP stack allows an unauthorized attacker to execute arbitrary code remotely over a network.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62784

A heap-based buffer overflow vulnerability in Microsoft Local Security Authority Server (lsasrv) enables an authorized attacker to execute arbitrary code remotely over a network.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62787

A use-after-free vulnerability in Windows DNS enables an authorized attacker to execute code remotely over a network, posing significant security risks.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62795

A use-after-free vulnerability in Windows LDAP enables unauthorized remote code execution over a network, posing significant security risks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62796

An out-of-bounds read vulnerability in Windows NTFS allows an authorized local attacker to disclose sensitive information by reading memory beyond intended boundaries.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62797

A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized local attacker to elevate privileges by exploiting memory management flaws.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62812

An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62816

A heap-based buffer overflow vulnerability in the Reliable Multicast Transport Driver (RMCAST) enables unauthorized attackers to execute arbitrary code over an adjacent network.

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62817

An out-of-bounds write vulnerability in Windows DNS enables an unauthorized attacker to execute arbitrary code over an adjacent network.

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62818

A use-after-free vulnerability in Active Directory Certificate Services (AD CS) allows an authorized attacker to remotely execute code over a network, posing a significant security risk.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62819

A Remote Code Execution vulnerability in the Windows Routing and Remote Access Service (RRAS) allows attackers to execute arbitrary code and gain unauthorized access to affected systems.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62820

A race condition vulnerability in Windows DNS caused by improper synchronization of shared resources enables unauthorized remote code execution.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62876

An out-of-bounds read vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62877

A stack-based buffer overflow vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62878

A stack-based buffer overflow vulnerability in Windows DNS enables unauthorized attackers to execute arbitrary code remotely over a network.

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62889

A double free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) allows unauthorized remote code execution, posing a critical security risk.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-415 - Double Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62890

A heap-based buffer overflow vulnerability in Windows GDI+ enables an authorized attacker to execute code locally, posing a significant security risk.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62892

A use after free vulnerability in the Capability Access Management Service (camsvc) allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62893

A use-after-free vulnerability in Windows Deployment Services allows unauthorized remote code execution, posing a critical security risk.

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62894

A heap-based buffer overflow vulnerability in the Windows DWM Core Library enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62908

A race condition in the Windows Backup Engine due to improper synchronization of shared resources allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65662

An out-of-bounds read vulnerability in the Windows Graphics Device Interface (GDI) allows an authorized local attacker to disclose sensitive information by reading memory beyond intended boundaries.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65671

A heap-based buffer overflow vulnerability in the Windows Remote Access API enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65678

A use-after-free vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65784

An out-of-bounds read vulnerability in Windows NTFS allows an authorized local attacker to disclose sensitive information by reading memory beyond intended boundaries.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65786

A heap-based buffer overflow vulnerability in the Desktop Window Manager allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65789

A use-after-free vulnerability in Windows DNS enables unauthorized attackers to execute arbitrary code remotely over a network.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65787

A heap-based buffer overflow vulnerability in the Desktop Window Manager allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65814

A heap-based buffer overflow vulnerability in the Windows Storage Port Driver enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-66799

A heap-based buffer overflow vulnerability in Windows Key Guard enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-68819

A buffer over-read vulnerability in the Windows Network File System allows an unauthorized attacker to cause a denial of service over a network.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

CWE-126 - Buffer Over-read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-68820

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-70307

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-70304

A heap-based buffer overflow vulnerability in Windows DNS allows an authorized local attacker to elevate privileges by exploiting memory corruption.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-70330

A heap-based buffer overflow vulnerability in Windows DNS allows an authorized local attacker to elevate privileges by exploiting memory corruption.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61352

A race condition in the Remote Desktop Client's concurrent execution of shared resources allows unauthorized remote code execution.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-70344

A stack-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting improper memory handling.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-70345

A heap-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-70346

A stack-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting improper memory handling.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-70347

A heap-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-42976

A critical Windows RPC API function lacks proper authentication, allowing an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-6726

An information leakage and spoofing vulnerability (CVE-2026-6726) in the TCG TPM 2.0 reference code allows local attackers with elevated privileges to forge TPM attestations by exploiting improper object-slot reuse.

7.9 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59122

A race condition in the Windows Telephony Service caused by improper synchronization of shared resources allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59125

A use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59131

An issue in AMD Zen allows an authorized local attacker to disclose information without an assigned CWE identifier.

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61349

A use-after-free vulnerability in the Windows Work Folder Service allows an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61363

A heap-based buffer overflow vulnerability in the Remote Desktop Client enables unauthorized attackers to execute arbitrary code remotely over a network.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61364

A missing authentication vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges, potentially compromising system security.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61365

A missing authentication vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges, potentially compromising system security.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61358

An improper link resolution vulnerability in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61360

An untrusted pointer dereference vulnerability in the Windows Graphics Device Interface (GDI) allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-822 - Untrusted Pointer Dereference

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61920

A race condition in Windows DNS caused by improper synchronization of shared resources enables an authorized attacker to execute code remotely.

6.6 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61926

A heap-based buffer overflow vulnerability in the Windows USB Driver enables an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61918

An out-of-bounds read vulnerability in the Remote Desktop Client enables unauthorized attackers to disclose sensitive information over a network.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61921

An out-of-bounds read vulnerability in the Remote Desktop Client enables unauthorized attackers to disclose sensitive information over a network.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62698

A numeric truncation error in Microsoft Digest Authentication enables an authorized attacker to locally elevate privileges by exploiting improper handling of numeric values.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-197 - Numeric Truncation Error

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62700

A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized local attacker to elevate privileges by exploiting memory management flaws.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62701

A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62709

A use of uninitialized resource vulnerability in Windows GDI+ allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62710

A heap-based buffer overflow vulnerability in the Windows Device Association Service enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62711

A use-after-free vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62720

An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62714

An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62717

A heap-based buffer overflow vulnerability in Windows Message Queuing enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62721

Insufficient granularity of access control in the User-Mode Power Service (UMPS) allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-1220 - Insufficient Granularity of Access Control

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62725

A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62726

A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62728

A TOCTOU race condition vulnerability in the Windows Common Log File System Driver allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62733

An out-of-bounds read vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62743

An out-of-bounds read vulnerability in the Windows Win32K component allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62730

A buffer over-read vulnerability in the Windows Wired AutoConfig Service allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-126 - Buffer Over-read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62732

A heap-based buffer overflow vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62734

A race condition in the Windows Telephony Service caused by improper synchronization of shared resources allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62757

An improper verification of cryptographic signatures in Windows Schannel enables unauthorized attackers to bypass security features remotely over a network.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62741

An integer underflow vulnerability in Windows HTTP.sys allows an authorized local attacker to elevate privileges by exploiting improper handling of integer values.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62752

A heap-based buffer overflow vulnerability in Windows Kerberos allows an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62769

A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62771

A heap-based buffer overflow vulnerability in the Windows Cloud Files Mini Filter Driver enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62761

An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62768

A stack-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting improper memory handling.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62770

A heap-based buffer overflow vulnerability in Windows Shell enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62776

An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62778

A use-after-free vulnerability in Windows DNS allows unauthorized attackers to elevate privileges over a network, posing a significant security risk.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62782

An out-of-bounds read vulnerability in the Windows SMB Client allows unauthorized attackers to disclose sensitive information over a network.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62781

A heap-based buffer overflow vulnerability in the RPC Runtime enables unauthorized attackers to execute arbitrary code remotely over a network.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62800

A heap-based buffer overflow vulnerability in the Windows SMB Server allows an authorized attacker to execute arbitrary code remotely over a network.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62786

An out-of-bounds read vulnerability in the Windows Win32K component allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62790

A heap-based buffer overflow vulnerability in the Windows SMB Server allows an authorized attacker to execute arbitrary code remotely over a network.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62793

A buffer over-read vulnerability in Windows NTFS allows an authorized local attacker to disclose sensitive information by reading beyond allocated memory boundaries.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-126 - Buffer Over-read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62803

An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62807

An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62814

An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62823

A heap-based buffer overflow vulnerability in the Windows DHCP Server enables unauthorized attackers to execute arbitrary code remotely over an adjacent network.

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62822

An integer overflow or wraparound vulnerability in Windows GDI+ enables unauthorized remote code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62880

An out-of-bounds read vulnerability in Windows NTFS allows an authorized local attacker to elevate privileges by exploiting improper memory access.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62881

A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62883

A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62885

A heap-based buffer overflow vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62887

An out-of-bounds read vulnerability in the Windows NTFS file system allows an authorized local attacker to access sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65681

A null pointer dereference vulnerability in the Windows iSCSI Target Service allows an unauthorized attacker to cause a denial of service over a network.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65679

A heap-based buffer overflow vulnerability in the Windows iSCSI Target Service enables unauthorized remote code execution over a network.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65773

An improper access control vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges, potentially compromising system integrity.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65774

A heap-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65775

A use-after-free vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65790

A heap-based buffer overflow vulnerability in Windows Message Queuing enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65791

A heap-based buffer overflow vulnerability in the Windows iSCSI Target Service enables unauthorized remote code execution over a network.

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65795

A Windows DNS vulnerability allows an authorized local attacker to elevate privileges without an assigned CWE identifier.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65794

A buffer over-read vulnerability in the Windows SMB Client allows unauthorized attackers to disclose information over a network.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-126 - Buffer Over-read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65797

A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65799

An integer overflow or wraparound vulnerability in Windows DNS allows an authorized local attacker to elevate privileges by exploiting the flaw.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65798

A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-197 - Numeric Truncation Error

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65796

A heap-based buffer overflow vulnerability in the Windows iSCSI Target Service enables an unauthorized attacker to cause a denial of service over a network.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-66802

A race condition caused by improper synchronization in Microsoft Azure Attestation and Device Health Attestation services allows unauthorized remote code execution.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-71331

Integer overflow vulnerabilities in Microsoft Azure Attestation and Device Health Attestation services allow unauthorized remote code execution, posing significant security risks.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62695

A heap-based buffer overflow vulnerability in Windows Storage allows an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62702

A null pointer dereference vulnerability in the Windows Graphics Kernel allows an unauthorized attacker to cause a denial of service over a network.

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62815

A use-after-free vulnerability in Microsoft QUIC allows unauthorized remote attackers to execute arbitrary code over a network.

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65672

A heap-based buffer overflow vulnerability in the Windows Remote Access API enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59126

A race condition in the Windows Event Logging Service due to improper synchronization of shared resources allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61359

A heap-based buffer overflow vulnerability in Windows Storage allows an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61355

A heap-based buffer overflow vulnerability in the Windows Sensor Data Service enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62751

An integer overflow vulnerability in the Windows Projected File System allows an authorized local attacker to elevate privileges by exploiting wraparound conditions.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62811

A heap-based buffer overflow vulnerability in Windows HTTP.sys enables an authorized local attacker to elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62832

An improper link resolution vulnerability in the Windows User Profile Service allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62888

A use-after-free vulnerability in the Windows DWM Core Library allows an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65777

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network, compromising the system's security controls.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-326 - Inadequate Encryption Strength

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61361

A use-after-free vulnerability in the Windows DHCP Client allows an authorized attacker to execute code locally, posing a significant security risk.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61927

A use-after-free vulnerability in the Windows Bind Filter Driver allows an authorized local attacker to elevate privileges on affected systems.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61933

An out-of-bounds read vulnerability in the Windows DWM Core Library allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61934

A use-after-free vulnerability in the Windows Bind Filter Driver allows an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62722

A heap-based buffer overflow vulnerability in the Windows Bind Filter Driver enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62737

An untrusted pointer dereference vulnerability in the Windows Kernel enables an authorized local attacker to elevate privileges by exploiting improper pointer validation.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-822 - Untrusted Pointer Dereference

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62766

A double free vulnerability in Windows Kerberos allows an authorized local attacker to elevate privileges by exploiting improper memory management.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-415 - Double Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62779

A use-after-free vulnerability in the Windows Schannel component allows an authorized local attacker to elevate privileges by exploiting memory management flaws.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62798

An untrusted pointer dereference vulnerability in the Windows Win32K component allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-822 - Untrusted Pointer Dereference

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65785

An uncontrolled resource consumption vulnerability in the Windows DHCP Client enables an unauthorized attacker to cause a denial of service on an adjacent network.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65788

A use-after-free vulnerability in the Desktop Window Manager allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61357

A use-after-free vulnerability in Application Information Services allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61929

A use-after-free vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges by exploiting improper memory management.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-61938

A use-after-free vulnerability in Windows Installer allows an authorized local attacker to elevate privileges by exploiting improper memory handling.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62708

A use-after-free vulnerability in the Windows Kernel allows an unauthorized attacker to elevate privileges via a physical attack vector.

6.4 (Medium)


                        
                          CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62736

A heap-based buffer overflow vulnerability in the Windows DHCP Client enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62749

A use-after-free vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges by exploiting improper memory management.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62780

A use-after-free vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges by exploiting improper memory management.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62788

A use-after-free vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges by exploiting improper memory management.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65776

A use-after-free vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-56179

An origin validation error in Windows Network Address Translation (NAT) enables an unauthorized attacker to perform spoofing attacks over an adjacent network.

8.3 (High)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-346 - Origin Validation Error

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62688

A heap-based buffer overflow vulnerability in the Windows MIDI Service Module enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62705

A race condition in the Windows Bind Filter Driver caused by improper synchronization of shared resources allows a local authorized attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-66804

An improper access control vulnerability in the Windows Cross Device Service allows an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62693

A race condition in the Windows MIDI Service Module due to improper synchronization of shared resources allows an authorized local attacker to elevate privileges.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65783

A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-70348

An improper link resolution vulnerability in Windows Management Services allows an authorized local attacker to cause a denial of service by exploiting link following before file access.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65779

A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65780

A double free vulnerability in Windows Autopilot allows an authorized attacker to locally elevate privileges by exploiting improper memory management.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-415 - Double Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65778

A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65782

A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-65781

A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62772

A heap-based buffer overflow vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) enables an authorized local attacker to elevate privileges on affected systems.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62775

An incorrect authorization vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized local attacker to disclose sensitive information.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-863 - Incorrect Authorization

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62799

A heap-based buffer overflow vulnerability in the Windows SMB Client enables an authorized attacker to locally elevate privileges by exploiting memory corruption.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-62824

A stack-based buffer overflow vulnerability in the Remote Desktop Client enables unauthorized attackers to execute arbitrary code remotely over a network.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59124

A deserialization vulnerability in Microsoft High Performance Computing (HPC) Pack allows unauthorized remote code execution via untrusted data over a network.

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-502 - Deserialization of Untrusted Data

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

CVE-2026-59133

A vulnerability in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to execute code with unnecessary privileges, enabling privilege escalation over a network.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-250 - Execution with Unnecessary Privileges

Affected products

Known affected 30 products

Product	Identifier	Version	Remediation
vers:unknown/* Microsoft / Windows 10 Version 1607 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1607 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 1809 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 21H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for 32-bit Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 10 Version 22H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 24H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 25H2 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 Version 26H1 for ARM64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows 11 version 26H1 for x64-based Systems		vers:unknown/*
vers:unknown/* Microsoft / Windows App Client for Windows Desktop		vers:unknown/*
vers:unknown/* Microsoft / Windows Remote Help		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2016 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2019 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2022 (Server Core installation)		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025		vers:unknown/*
vers:unknown/* Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/*

References

232 references

URL	Category
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```\n",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
        "title": "CWE-59"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
        "title": "CWE-77"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Partial String Comparison",
        "title": "CWE-187"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Integer Underflow (Wrap or Wraparound)",
        "title": "CWE-191"
      },
      {
        "category": "general",
        "text": "Numeric Truncation Error",
        "title": "CWE-197"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Observable Timing Discrepancy",
        "title": "CWE-208"
      },
      {
        "category": "general",
        "text": "Execution with Unnecessary Privileges",
        "title": "CWE-250"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Missing Authentication for Critical Function",
        "title": "CWE-306"
      },
      {
        "category": "general",
        "text": "Cleartext Storage of Sensitive Information",
        "title": "CWE-312"
      },
      {
        "category": "general",
        "text": "Inadequate Encryption Strength",
        "title": "CWE-326"
      },
      {
        "category": "general",
        "text": "Origin Validation Error",
        "title": "CWE-346"
      },
      {
        "category": "general",
        "text": "Improper Verification of Cryptographic Signature",
        "title": "CWE-347"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
        "title": "CWE-367"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Double Free",
        "title": "CWE-415"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Untrusted Search Path",
        "title": "CWE-426"
      },
      {
        "category": "general",
        "text": "Uncontrolled Search Path Element",
        "title": "CWE-427"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Deserialization of Untrusted Data",
        "title": "CWE-502"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Untrusted Pointer Dereference",
        "title": "CWE-822"
      },
      {
        "category": "general",
        "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
        "title": "CWE-843"
      },
      {
        "category": "general",
        "text": "Missing Authorization",
        "title": "CWE-862"
      },
      {
        "category": "general",
        "text": "Incorrect Authorization",
        "title": "CWE-863"
      },
      {
        "category": "general",
        "text": "Use of Uninitialized Resource",
        "title": "CWE-908"
      },
      {
        "category": "general",
        "text": "Insufficient Granularity of Access Control",
        "title": "CWE-1220"
      },
      {
        "category": "general",
        "text": "Weak Authentication",
        "title": "CWE-1390"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "title": "Kwetsbaarheden verholpen in Microsoft Windows",
    "tracking": {
      "current_release_date": "2026-08-11T19:47:23.061050Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0284",
      "initial_release_date": "2026-08-11T19:47:23.061050Z",
      "revision_history": [
        {
          "date": "2026-08-11T19:47:23.061050Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 1607 for 32-bit Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 1607 for x64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 1809 for 32-bit Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 1809 for x64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-5"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 21H2 for 32-bit Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-6"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 21H2 for ARM64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-7"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 21H2 for x64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-8"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 22H2 for 32-bit Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-9"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 22H2 for ARM64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-10"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10 Version 22H2 for x64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-11"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 11 Version 24H2 for ARM64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-12"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 11 Version 24H2 for x64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-13"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 11 Version 25H2 for ARM64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-14"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 11 Version 25H2 for x64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-15"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 11 Version 26H1 for ARM64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-16"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 11 version 26H1 for x64-based Systems"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-17"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows App Client for Windows Desktop"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-18"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Remote Help"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-19"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-20"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012 (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-21"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012 R2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-22"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012 R2 (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-23"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2016"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-24"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2016 (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-25"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2019"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-26"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2019 (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-27"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2022"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-28"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2022 (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-29"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2025"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-30"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2025 (Server Core installation)"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-50472",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows LUAFV enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-50472 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50472.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-50472"
    },
    {
      "cve": "CVE-2026-56174",
      "cwe": {
        "id": "CWE-426",
        "name": "Untrusted Search Path"
      },
      "notes": [
        {
          "category": "other",
          "text": "Untrusted Search Path",
          "title": "CWE-426"
        },
        {
          "category": "description",
          "text": "An untrusted search path vulnerability in Windows Narrator Braille allows an authorized local attacker to elevate privileges by exploiting improper path handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-56174 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-56174.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-56174"
    },
    {
      "cve": "CVE-2026-54113",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "description",
          "text": "A vulnerability in the Windows Kernel allows unauthorized attackers to cause a denial of service over a network by allocating resources without any limits or throttling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-54113 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-54113.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-54113"
    },
    {
      "cve": "CVE-2026-54984",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Imaging Component enables unauthorized local code execution.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-54984 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-54984.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-54984"
    },
    {
      "cve": "CVE-2026-49179",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
          "title": "CWE-77"
        },
        {
          "category": "description",
          "text": "Improper neutralization of special elements in commands within Windows Active Directory allows unauthorized attackers to execute code remotely over a network, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-49179 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-49179.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-49179"
    },
    {
      "cve": "CVE-2026-6727",
      "cwe": {
        "id": "CWE-208",
        "name": "Observable Timing Discrepancy"
      },
      "notes": [
        {
          "category": "other",
          "text": "Observable Timing Discrepancy",
          "title": "CWE-208"
        },
        {
          "category": "description",
          "text": "A timing side-channel vulnerability in the RSA OAEP decryption of TPM 2.0, identified as CVE-2026-6727, allows a privileged local attacker to potentially recover sensitive information and forge attestations, with Microsoft Windows updates addressing the issue.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-6727 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6727.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-6727"
    },
    {
      "cve": "CVE-2026-59127",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow or wraparound vulnerability in Windows Installer enables an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59127 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59127.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59127"
    },
    {
      "cve": "CVE-2026-59128",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows Encrypting File System (EFS) allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59128 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59128.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59128"
    },
    {
      "cve": "CVE-2026-59130",
      "notes": [
        {
          "category": "description",
          "text": "An issue in AMD Zen allows an authorized local attacker to disclose information without an assigned CWE identifier.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59130 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59130.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59130"
    },
    {
      "cve": "CVE-2026-59132",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "A null pointer dereference vulnerability in Windows TCP/IP stack allows unauthorized attackers to cause a denial of service over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59132 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59132.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59132"
    },
    {
      "cve": "CVE-2026-59135",
      "cwe": {
        "id": "CWE-1390",
        "name": "Weak Authentication"
      },
      "notes": [
        {
          "category": "other",
          "text": "Weak Authentication",
          "title": "CWE-1390"
        },
        {
          "category": "description",
          "text": "A weak authentication vulnerability in the Microsoft Windows Search Component permits an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59135 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59135.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59135"
    },
    {
      "cve": "CVE-2026-59134",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Remote Desktop Client enables unauthorized attackers to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59134 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59134.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59134"
    },
    {
      "cve": "CVE-2026-59136",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        },
        {
          "category": "description",
          "text": "An uninitialized resource vulnerability in Microsoft COM for Windows allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59136 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59136.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59136"
    },
    {
      "cve": "CVE-2026-59137",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        },
        {
          "category": "description",
          "text": "A use of uninitialized resource vulnerability in the Windows Event Logging Service allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59137 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59137.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59137"
    },
    {
      "cve": "CVE-2026-59138",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "A null pointer dereference vulnerability in Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59138 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59138.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59138"
    },
    {
      "cve": "CVE-2026-61345",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "A null pointer dereference vulnerability in Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61345 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61345.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61345"
    },
    {
      "cve": "CVE-2026-61346",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Graphics Kernel allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61346 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61346.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61346"
    },
    {
      "cve": "CVE-2026-61353",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61353 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61353.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61353"
    },
    {
      "cve": "CVE-2026-61347",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in the Windows Event Logging Service allows an authorized local attacker to disclose sensitive information by reading beyond allocated memory buffers.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61347 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61347.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61347"
    },
    {
      "cve": "CVE-2026-61348",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61348 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61348.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61348"
    },
    {
      "cve": "CVE-2026-61350",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in Windows NTFS allows unauthorized attackers to disclose information through physical access to the system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61350 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61350.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61350"
    },
    {
      "cve": "CVE-2026-61356",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Authentication for Critical Function",
          "title": "CWE-306"
        },
        {
          "category": "description",
          "text": "A missing authentication vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges, potentially compromising system security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61356 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61356.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61356"
    },
    {
      "cve": "CVE-2026-61367",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Authentication for Critical Function",
          "title": "CWE-306"
        },
        {
          "category": "description",
          "text": "A missing authentication vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges, potentially compromising system security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61367 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61367.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61367"
    },
    {
      "cve": "CVE-2026-61923",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Display Enhancement Service enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61923 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61923.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61923"
    },
    {
      "cve": "CVE-2026-61366",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Double Free",
          "title": "CWE-415"
        },
        {
          "category": "description",
          "text": "A double free vulnerability in the Windows Network Connection Broker allows an authorized local attacker to elevate privileges by exploiting improper memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61366 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61366.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61366"
    },
    {
      "cve": "CVE-2026-61368",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Hyper-V allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61368 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61368.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61368"
    },
    {
      "cve": "CVE-2026-61924",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Remote Desktop Client enables unauthorized attackers to disclose sensitive information over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61924 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61924.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61924"
    },
    {
      "cve": "CVE-2026-61925",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        },
        {
          "category": "description",
          "text": "An incorrect authorization vulnerability in Windows Installer allows an authorized local attacker to elevate privileges, potentially compromising system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61925 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61925.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61925"
    },
    {
      "cve": "CVE-2026-61928",
      "cwe": {
        "id": "CWE-312",
        "name": "Cleartext Storage of Sensitive Information"
      },
      "notes": [
        {
          "category": "other",
          "text": "Cleartext Storage of Sensitive Information",
          "title": "CWE-312"
        },
        {
          "category": "description",
          "text": "Windows Hello stores sensitive information in cleartext, allowing an authorized local attacker to perform tampering with the stored data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61928 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61928.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61928"
    },
    {
      "cve": "CVE-2026-61930",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Kernel enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61930 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61930.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61930"
    },
    {
      "cve": "CVE-2026-61937",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow or wraparound vulnerability in Windows HTTP.sys allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61937 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61937.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61937"
    },
    {
      "cve": "CVE-2026-62692",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62692 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62692.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62692"
    },
    {
      "cve": "CVE-2026-61932",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        },
        {
          "category": "description",
          "text": "A type confusion vulnerability in the Windows DWM Core Library allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61932 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61932.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61932"
    },
    {
      "cve": "CVE-2026-61936",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Authorization",
          "title": "CWE-862"
        },
        {
          "category": "description",
          "text": "A missing authorization vulnerability in the Windows Defender Firewall Service allows an authorized local attacker to bypass a security feature.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61936 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61936.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61936"
    },
    {
      "cve": "CVE-2026-61939",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Winlogon allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61939 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61939.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61939"
    },
    {
      "cve": "CVE-2026-62690",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in Windows Push Notifications due to improper synchronization of shared resources allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62690 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62690.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62690"
    },
    {
      "cve": "CVE-2026-62696",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows Program Compatibility Assistant Service allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62696 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62696.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62696"
    },
    {
      "cve": "CVE-2026-62699",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) enables unauthorized attackers with physical access to execute arbitrary code.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62699 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62699.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62699"
    },
    {
      "cve": "CVE-2026-62703",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows DWM Core Library allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62703 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62703.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62703"
    },
    {
      "cve": "CVE-2026-62707",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Modern Device Management (MDM) allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62707 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62707.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62707"
    },
    {
      "cve": "CVE-2026-62713",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Cloud Files Mini Filter Driver enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62713 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62713.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62713"
    },
    {
      "cve": "CVE-2026-62712",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62712 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62712.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62712"
    },
    {
      "cve": "CVE-2026-62718",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62718 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62718.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62718"
    },
    {
      "cve": "CVE-2026-62715",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62715 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62715.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62715"
    },
    {
      "cve": "CVE-2026-62716",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62716 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62716.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62716"
    },
    {
      "cve": "CVE-2026-62719",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Message Queuing enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62719 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62719.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62719"
    },
    {
      "cve": "CVE-2026-62723",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62723 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62723.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62723"
    },
    {
      "cve": "CVE-2026-62724",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62724 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62724.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62724"
    },
    {
      "cve": "CVE-2026-62748",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in the Windows Telephony Service caused by improper synchronization of shared resources allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62748 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62748.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62748"
    },
    {
      "cve": "CVE-2026-62729",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in the Windows Telephony Service caused by improper synchronization of shared resources allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62729 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62729.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62729"
    },
    {
      "cve": "CVE-2026-62738",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in Windows Management Instrumentation allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62738 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62738.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62738"
    },
    {
      "cve": "CVE-2026-62746",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in the Windows Win32K component allows an authorized local attacker to disclose sensitive information by reading beyond allocated memory bounds.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62746 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62746.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62746"
    },
    {
      "cve": "CVE-2026-62740",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        },
        {
          "category": "description",
          "text": "An uninitialized resource vulnerability in the Windows Imaging Component allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62740 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62740.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62740"
    },
    {
      "cve": "CVE-2026-62753",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows HTTP.sys enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62753 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62753.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62753"
    },
    {
      "cve": "CVE-2026-62735",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows HTTP.sys enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62735 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62735.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62735"
    },
    {
      "cve": "CVE-2026-62739",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Numeric Truncation Error",
          "title": "CWE-197"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows HTTP.sys enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62739 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62739.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62739"
    },
    {
      "cve": "CVE-2026-62742",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62742 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62742.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62742"
    },
    {
      "cve": "CVE-2026-62745",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62745 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62745.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62745"
    },
    {
      "cve": "CVE-2026-62747",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Device Association Service enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62747 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62747.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62747"
    },
    {
      "cve": "CVE-2026-62750",
      "cwe": {
        "id": "CWE-187",
        "name": "Partial String Comparison"
      },
      "notes": [
        {
          "category": "other",
          "text": "Partial String Comparison",
          "title": "CWE-187"
        },
        {
          "category": "description",
          "text": "A partial string comparison vulnerability in the Windows HTTP Protocol Stack allows unauthorized attackers on adjacent networks to tamper with transmitted data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62750 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62750.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62750"
    },
    {
      "cve": "CVE-2026-62754",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Kerberos allows an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62754 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62754.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62754"
    },
    {
      "cve": "CVE-2026-62783",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Remote Access Connection Manager allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62783 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62783.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62783"
    },
    {
      "cve": "CVE-2026-62755",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in the Windows DHCP Client allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62755 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62755.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62755"
    },
    {
      "cve": "CVE-2026-62758",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Remote Access Connection Manager allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62758 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62758.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62758"
    },
    {
      "cve": "CVE-2026-62773",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Kerberos allows an authorized local attacker to elevate privileges by exploiting improper memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62773 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62773.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62773"
    },
    {
      "cve": "CVE-2026-62774",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Graphics Kernel allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62774 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62774.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62774"
    },
    {
      "cve": "CVE-2026-62785",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows LDAP enables unauthorized remote code execution by attackers over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62785 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62785.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62785"
    },
    {
      "cve": "CVE-2026-62777",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Authentication for Critical Function",
          "title": "CWE-306"
        },
        {
          "category": "description",
          "text": "A missing authentication vulnerability in a critical function of the Windows License Manager allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62777 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62777.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62777"
    },
    {
      "cve": "CVE-2026-62792",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in the Windows TCP/IP stack allows an unauthorized attacker to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62792 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62792.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62792"
    },
    {
      "cve": "CVE-2026-62784",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Microsoft Local Security Authority Server (lsasrv) enables an authorized attacker to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62784 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62784.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62784"
    },
    {
      "cve": "CVE-2026-62787",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows DNS enables an authorized attacker to execute code remotely over a network, posing significant security risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62787 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62787.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62787"
    },
    {
      "cve": "CVE-2026-62795",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows LDAP enables unauthorized remote code execution over a network, posing significant security risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62795 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62795.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62795"
    },
    {
      "cve": "CVE-2026-62796",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in Windows NTFS allows an authorized local attacker to disclose sensitive information by reading memory beyond intended boundaries.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62796 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62796.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62796"
    },
    {
      "cve": "CVE-2026-62797",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized local attacker to elevate privileges by exploiting memory management flaws.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62797 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62797.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62797"
    },
    {
      "cve": "CVE-2026-62812",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "description",
          "text": "An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62812 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62812.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62812"
    },
    {
      "cve": "CVE-2026-62816",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Reliable Multicast Transport Driver (RMCAST) enables unauthorized attackers to execute arbitrary code over an adjacent network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62816 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62816.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62816"
    },
    {
      "cve": "CVE-2026-62817",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in Windows DNS enables an unauthorized attacker to execute arbitrary code over an adjacent network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62817 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62817.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62817"
    },
    {
      "cve": "CVE-2026-62818",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Active Directory Certificate Services (AD CS) allows an authorized attacker to remotely execute code over a network, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62818 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62818.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62818"
    },
    {
      "cve": "CVE-2026-62819",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A Remote Code Execution vulnerability in the Windows Routing and Remote Access Service (RRAS) allows attackers to execute arbitrary code and gain unauthorized access to affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62819 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62819.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62819"
    },
    {
      "cve": "CVE-2026-62820",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "description",
          "text": "A race condition vulnerability in Windows DNS caused by improper synchronization of shared resources enables unauthorized remote code execution.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62820 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62820.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62820"
    },
    {
      "cve": "CVE-2026-62876",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62876 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62876.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62876"
    },
    {
      "cve": "CVE-2026-62877",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62877 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62877.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62877"
    },
    {
      "cve": "CVE-2026-62878",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in Windows DNS enables unauthorized attackers to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62878 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62878.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62878"
    },
    {
      "cve": "CVE-2026-62889",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Double Free",
          "title": "CWE-415"
        },
        {
          "category": "description",
          "text": "A double free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) allows unauthorized remote code execution, posing a critical security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62889 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62889.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62889"
    },
    {
      "cve": "CVE-2026-62890",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows GDI+ enables an authorized attacker to execute code locally, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62890 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62890.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62890"
    },
    {
      "cve": "CVE-2026-62892",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use after free vulnerability in the Capability Access Management Service (camsvc) allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62892 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62892.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62892"
    },
    {
      "cve": "CVE-2026-62893",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Deployment Services allows unauthorized remote code execution, posing a critical security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62893 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62893.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62893"
    },
    {
      "cve": "CVE-2026-62894",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows DWM Core Library enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62894 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62894.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62894"
    },
    {
      "cve": "CVE-2026-62908",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in the Windows Backup Engine due to improper synchronization of shared resources allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62908 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62908.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62908"
    },
    {
      "cve": "CVE-2026-65662",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows Graphics Device Interface (GDI) allows an authorized local attacker to disclose sensitive information by reading memory beyond intended boundaries.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65662 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65662.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65662"
    },
    {
      "cve": "CVE-2026-65671",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Remote Access API enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65671 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65671.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65671"
    },
    {
      "cve": "CVE-2026-65678",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65678 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65678.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65678"
    },
    {
      "cve": "CVE-2026-65784",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in Windows NTFS allows an authorized local attacker to disclose sensitive information by reading memory beyond intended boundaries.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65784 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65784.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65784"
    },
    {
      "cve": "CVE-2026-65786",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Desktop Window Manager allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65786 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65786.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65786"
    },
    {
      "cve": "CVE-2026-65789",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows DNS enables unauthorized attackers to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65789 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65789.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65789"
    },
    {
      "cve": "CVE-2026-65787",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Desktop Window Manager allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65787 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65787.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65787"
    },
    {
      "cve": "CVE-2026-65814",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Storage Port Driver enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65814 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65814.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65814"
    },
    {
      "cve": "CVE-2026-66799",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Key Guard enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-66799 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-66799.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-66799"
    },
    {
      "cve": "CVE-2026-68819",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in the Windows Network File System allows an unauthorized attacker to cause a denial of service over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-68819 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-68819.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-68819"
    },
    {
      "cve": "CVE-2026-68820",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-68820 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-68820.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-68820"
    },
    {
      "cve": "CVE-2026-70307",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-70307 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70307.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-70307"
    },
    {
      "cve": "CVE-2026-70304",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows DNS allows an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-70304 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70304.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-70304"
    },
    {
      "cve": "CVE-2026-70330",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows DNS allows an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-70330 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70330.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-70330"
    },
    {
      "cve": "CVE-2026-61352",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "description",
          "text": "A race condition in the Remote Desktop Client\u0027s concurrent execution of shared resources allows unauthorized remote code execution.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61352 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61352.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61352"
    },
    {
      "cve": "CVE-2026-70344",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting improper memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-70344 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70344.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-70344"
    },
    {
      "cve": "CVE-2026-70345",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-70345 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70345.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-70345"
    },
    {
      "cve": "CVE-2026-70346",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting improper memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-70346 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70346.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-70346"
    },
    {
      "cve": "CVE-2026-70347",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-70347 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70347.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-70347"
    },
    {
      "cve": "CVE-2026-42976",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Authentication for Critical Function",
          "title": "CWE-306"
        },
        {
          "category": "description",
          "text": "A critical Windows RPC API function lacks proper authentication, allowing an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-42976 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-42976.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-42976"
    },
    {
      "cve": "CVE-2026-6726",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        },
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        },
        {
          "category": "description",
          "text": "An information leakage and spoofing vulnerability (CVE-2026-6726) in the TCG TPM 2.0 reference code allows local attackers with elevated privileges to forge TPM attestations by exploiting improper object-slot reuse.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-6726 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6726.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-6726"
    },
    {
      "cve": "CVE-2026-59122",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in the Windows Telephony Service caused by improper synchronization of shared resources allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59122 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59122.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59122"
    },
    {
      "cve": "CVE-2026-59125",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59125 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59125.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59125"
    },
    {
      "cve": "CVE-2026-59131",
      "notes": [
        {
          "category": "description",
          "text": "An issue in AMD Zen allows an authorized local attacker to disclose information without an assigned CWE identifier.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59131 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59131.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59131"
    },
    {
      "cve": "CVE-2026-61349",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Work Folder Service allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61349 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61349.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61349"
    },
    {
      "cve": "CVE-2026-61363",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Remote Desktop Client enables unauthorized attackers to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61363 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61363.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61363"
    },
    {
      "cve": "CVE-2026-61364",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Authentication for Critical Function",
          "title": "CWE-306"
        },
        {
          "category": "description",
          "text": "A missing authentication vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges, potentially compromising system security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61364 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61364.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61364"
    },
    {
      "cve": "CVE-2026-61365",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Authentication for Critical Function",
          "title": "CWE-306"
        },
        {
          "category": "description",
          "text": "A missing authentication vulnerability in Windows Remote Desktop Services allows an authorized attacker to locally elevate privileges, potentially compromising system security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61365 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61365.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61365"
    },
    {
      "cve": "CVE-2026-61358",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "description",
          "text": "An improper link resolution vulnerability in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61358 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61358.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61358"
    },
    {
      "cve": "CVE-2026-61360",
      "cwe": {
        "id": "CWE-822",
        "name": "Untrusted Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Untrusted Pointer Dereference",
          "title": "CWE-822"
        },
        {
          "category": "description",
          "text": "An untrusted pointer dereference vulnerability in the Windows Graphics Device Interface (GDI) allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61360 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61360.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61360"
    },
    {
      "cve": "CVE-2026-61920",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in Windows DNS caused by improper synchronization of shared resources enables an authorized attacker to execute code remotely.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61920 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61920.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61920"
    },
    {
      "cve": "CVE-2026-61926",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows USB Driver enables an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61926 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61926.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61926"
    },
    {
      "cve": "CVE-2026-61918",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Remote Desktop Client enables unauthorized attackers to disclose sensitive information over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61918 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61918.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61918"
    },
    {
      "cve": "CVE-2026-61921",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Remote Desktop Client enables unauthorized attackers to disclose sensitive information over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61921 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61921.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61921"
    },
    {
      "cve": "CVE-2026-62698",
      "cwe": {
        "id": "CWE-197",
        "name": "Numeric Truncation Error"
      },
      "notes": [
        {
          "category": "other",
          "text": "Numeric Truncation Error",
          "title": "CWE-197"
        },
        {
          "category": "description",
          "text": "A numeric truncation error in Microsoft Digest Authentication enables an authorized attacker to locally elevate privileges by exploiting improper handling of numeric values.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62698 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62698.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62698"
    },
    {
      "cve": "CVE-2026-62700",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized local attacker to elevate privileges by exploiting memory management flaws.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62700 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62700.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62700"
    },
    {
      "cve": "CVE-2026-62701",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62701 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62701.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62701"
    },
    {
      "cve": "CVE-2026-62709",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        },
        {
          "category": "description",
          "text": "A use of uninitialized resource vulnerability in Windows GDI+ allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62709 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62709.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62709"
    },
    {
      "cve": "CVE-2026-62710",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Device Association Service enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62710 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62710.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62710"
    },
    {
      "cve": "CVE-2026-62711",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62711 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62711.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62711"
    },
    {
      "cve": "CVE-2026-62720",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62720 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62720.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62720"
    },
    {
      "cve": "CVE-2026-62714",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62714 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62714.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62714"
    },
    {
      "cve": "CVE-2026-62717",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Message Queuing enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62717 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62717.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62717"
    },
    {
      "cve": "CVE-2026-62721",
      "cwe": {
        "id": "CWE-1220",
        "name": "Insufficient Granularity of Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insufficient Granularity of Access Control",
          "title": "CWE-1220"
        },
        {
          "category": "description",
          "text": "Insufficient granularity of access control in the User-Mode Power Service (UMPS) allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62721 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62721.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62721"
    },
    {
      "cve": "CVE-2026-62725",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62725 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62725.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62725"
    },
    {
      "cve": "CVE-2026-62726",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use after free vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62726 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62726.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62726"
    },
    {
      "cve": "CVE-2026-62728",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
          "title": "CWE-367"
        },
        {
          "category": "description",
          "text": "A TOCTOU race condition vulnerability in the Windows Common Log File System Driver allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62728 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62728.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62728"
    },
    {
      "cve": "CVE-2026-62733",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62733 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62733.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62733"
    },
    {
      "cve": "CVE-2026-62743",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows Win32K component allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62743 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62743.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62743"
    },
    {
      "cve": "CVE-2026-62730",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in the Windows Wired AutoConfig Service allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62730 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62730.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62730"
    },
    {
      "cve": "CVE-2026-62732",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Telephony Service allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62732 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62732.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62732"
    },
    {
      "cve": "CVE-2026-62734",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in the Windows Telephony Service caused by improper synchronization of shared resources allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62734 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62734.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62734"
    },
    {
      "cve": "CVE-2026-62757",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Verification of Cryptographic Signature",
          "title": "CWE-347"
        },
        {
          "category": "description",
          "text": "An improper verification of cryptographic signatures in Windows Schannel enables unauthorized attackers to bypass security features remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62757 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62757.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62757"
    },
    {
      "cve": "CVE-2026-62741",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in Windows HTTP.sys allows an authorized local attacker to elevate privileges by exploiting improper handling of integer values.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62741 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62741.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62741"
    },
    {
      "cve": "CVE-2026-62752",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Kerberos allows an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62752 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62752.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62752"
    },
    {
      "cve": "CVE-2026-62769",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Numeric Truncation Error",
          "title": "CWE-197"
        },
        {
          "category": "description",
          "text": "A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62769 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62769.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62769"
    },
    {
      "cve": "CVE-2026-62771",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Cloud Files Mini Filter Driver enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62771 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62771.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62771"
    },
    {
      "cve": "CVE-2026-62761",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "description",
          "text": "An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62761 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62761.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62761"
    },
    {
      "cve": "CVE-2026-62768",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting improper memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62768 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62768.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62768"
    },
    {
      "cve": "CVE-2026-62770",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Shell enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62770 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62770.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62770"
    },
    {
      "cve": "CVE-2026-62776",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "description",
          "text": "An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62776 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62776.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62776"
    },
    {
      "cve": "CVE-2026-62778",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows DNS allows unauthorized attackers to elevate privileges over a network, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62778 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62778.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62778"
    },
    {
      "cve": "CVE-2026-62782",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows SMB Client allows unauthorized attackers to disclose sensitive information over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62782 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62782.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62782"
    },
    {
      "cve": "CVE-2026-62781",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the RPC Runtime enables unauthorized attackers to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62781 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62781.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62781"
    },
    {
      "cve": "CVE-2026-62800",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows SMB Server allows an authorized attacker to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62800 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62800.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62800"
    },
    {
      "cve": "CVE-2026-62786",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows Win32K component allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62786 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62786.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62786"
    },
    {
      "cve": "CVE-2026-62790",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows SMB Server allows an authorized attacker to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62790 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62790.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62790"
    },
    {
      "cve": "CVE-2026-62793",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in Windows NTFS allows an authorized local attacker to disclose sensitive information by reading beyond allocated memory boundaries.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62793 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62793.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62793"
    },
    {
      "cve": "CVE-2026-62803",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "description",
          "text": "An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62803 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62803.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62803"
    },
    {
      "cve": "CVE-2026-62807",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "description",
          "text": "An improper link resolution vulnerability in Windows DHCP Server allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62807 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62807.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62807"
    },
    {
      "cve": "CVE-2026-62814",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in the Windows DHCP Server allows unauthorized attackers to disclose information across adjacent networks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62814 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62814.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62814"
    },
    {
      "cve": "CVE-2026-62823",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows DHCP Server enables unauthorized attackers to execute arbitrary code remotely over an adjacent network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62823 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62823.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62823"
    },
    {
      "cve": "CVE-2026-62822",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow or wraparound vulnerability in Windows GDI+ enables unauthorized remote code execution.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62822 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62822.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62822"
    },
    {
      "cve": "CVE-2026-62880",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in Windows NTFS allows an authorized local attacker to elevate privileges by exploiting improper memory access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62880 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62880.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62880"
    },
    {
      "cve": "CVE-2026-62881",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Numeric Truncation Error",
          "title": "CWE-197"
        },
        {
          "category": "description",
          "text": "A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62881 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62881.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62881"
    },
    {
      "cve": "CVE-2026-62883",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Numeric Truncation Error",
          "title": "CWE-197"
        },
        {
          "category": "description",
          "text": "A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62883 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62883.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62883"
    },
    {
      "cve": "CVE-2026-62885",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62885 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62885.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62885"
    },
    {
      "cve": "CVE-2026-62887",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows NTFS file system allows an authorized local attacker to access sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62887 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62887.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62887"
    },
    {
      "cve": "CVE-2026-65681",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "A null pointer dereference vulnerability in the Windows iSCSI Target Service allows an unauthorized attacker to cause a denial of service over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65681 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65681.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65681"
    },
    {
      "cve": "CVE-2026-65679",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows iSCSI Target Service enables unauthorized remote code execution over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65679 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65679.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65679"
    },
    {
      "cve": "CVE-2026-65773",
      "notes": [
        {
          "category": "description",
          "text": "An improper access control vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges, potentially compromising system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65773 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65773.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65773"
    },
    {
      "cve": "CVE-2026-65774",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Installer enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65774 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65774.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65774"
    },
    {
      "cve": "CVE-2026-65775",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65775 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65775.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65775"
    },
    {
      "cve": "CVE-2026-65790",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Message Queuing enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65790 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65790.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65790"
    },
    {
      "cve": "CVE-2026-65791",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows iSCSI Target Service enables unauthorized remote code execution over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65791 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65791.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65791"
    },
    {
      "cve": "CVE-2026-65795",
      "notes": [
        {
          "category": "description",
          "text": "A Windows DNS vulnerability allows an authorized local attacker to elevate privileges without an assigned CWE identifier.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65795 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65795.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65795"
    },
    {
      "cve": "CVE-2026-65794",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in the Windows SMB Client allows unauthorized attackers to disclose information over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65794 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65794.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65794"
    },
    {
      "cve": "CVE-2026-65797",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Numeric Truncation Error",
          "title": "CWE-197"
        },
        {
          "category": "description",
          "text": "A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65797 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65797.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65797"
    },
    {
      "cve": "CVE-2026-65799",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow or wraparound vulnerability in Windows DNS allows an authorized local attacker to elevate privileges by exploiting the flaw.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65799 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65799.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65799"
    },
    {
      "cve": "CVE-2026-65798",
      "cwe": {
        "id": "CWE-197",
        "name": "Numeric Truncation Error"
      },
      "notes": [
        {
          "category": "other",
          "text": "Numeric Truncation Error",
          "title": "CWE-197"
        },
        {
          "category": "description",
          "text": "A numeric truncation error in Windows DNS enables an authorized local attacker to elevate privileges by exploiting improper handling of numeric data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65798 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65798.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65798"
    },
    {
      "cve": "CVE-2026-65796",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows iSCSI Target Service enables an unauthorized attacker to cause a denial of service over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65796 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65796.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65796"
    },
    {
      "cve": "CVE-2026-66802",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition caused by improper synchronization in Microsoft Azure Attestation and Device Health Attestation services allows unauthorized remote code execution.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-66802 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-66802.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-66802"
    },
    {
      "cve": "CVE-2026-71331",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "Integer overflow vulnerabilities in Microsoft Azure Attestation and Device Health Attestation services allow unauthorized remote code execution, posing significant security risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-71331 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-71331.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-71331"
    },
    {
      "cve": "CVE-2026-62695",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Storage allows an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62695 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62695.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62695"
    },
    {
      "cve": "CVE-2026-62702",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "A null pointer dereference vulnerability in the Windows Graphics Kernel allows an unauthorized attacker to cause a denial of service over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62702 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62702.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62702"
    },
    {
      "cve": "CVE-2026-62815",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Microsoft QUIC allows unauthorized remote attackers to execute arbitrary code over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62815 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62815.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62815"
    },
    {
      "cve": "CVE-2026-65672",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Remote Access API enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65672 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65672.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65672"
    },
    {
      "cve": "CVE-2026-59126",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "description",
          "text": "A race condition in the Windows Event Logging Service due to improper synchronization of shared resources allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59126 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59126.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59126"
    },
    {
      "cve": "CVE-2026-61359",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows Storage allows an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61359 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61359.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61359"
    },
    {
      "cve": "CVE-2026-61355",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Sensor Data Service enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61355 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61355.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61355"
    },
    {
      "cve": "CVE-2026-62751",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow vulnerability in the Windows Projected File System allows an authorized local attacker to elevate privileges by exploiting wraparound conditions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62751 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62751.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62751"
    },
    {
      "cve": "CVE-2026-62811",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in Windows HTTP.sys enables an authorized local attacker to elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62811 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62811.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62811"
    },
    {
      "cve": "CVE-2026-62832",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "description",
          "text": "An improper link resolution vulnerability in the Windows User Profile Service allows an authorized local attacker to elevate privileges by exploiting file access mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62832 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62832.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62832"
    },
    {
      "cve": "CVE-2026-62888",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows DWM Core Library allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62888 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62888.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62888"
    },
    {
      "cve": "CVE-2026-65777",
      "cwe": {
        "id": "CWE-326",
        "name": "Inadequate Encryption Strength"
      },
      "notes": [
        {
          "category": "other",
          "text": "Inadequate Encryption Strength",
          "title": "CWE-326"
        },
        {
          "category": "description",
          "text": "Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network, compromising the system\u0027s security controls.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65777 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65777.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65777"
    },
    {
      "cve": "CVE-2026-61361",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows DHCP Client allows an authorized attacker to execute code locally, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61361 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61361.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61361"
    },
    {
      "cve": "CVE-2026-61927",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Bind Filter Driver allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61927 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61927.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61927"
    },
    {
      "cve": "CVE-2026-61933",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the Windows DWM Core Library allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61933 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61933.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61933"
    },
    {
      "cve": "CVE-2026-61934",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Bind Filter Driver allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61934 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61934.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61934"
    },
    {
      "cve": "CVE-2026-62722",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Bind Filter Driver enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62722 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62722.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62722"
    },
    {
      "cve": "CVE-2026-62737",
      "cwe": {
        "id": "CWE-822",
        "name": "Untrusted Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Untrusted Pointer Dereference",
          "title": "CWE-822"
        },
        {
          "category": "description",
          "text": "An untrusted pointer dereference vulnerability in the Windows Kernel enables an authorized local attacker to elevate privileges by exploiting improper pointer validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62737 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62737.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62737"
    },
    {
      "cve": "CVE-2026-62766",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Double Free",
          "title": "CWE-415"
        },
        {
          "category": "description",
          "text": "A double free vulnerability in Windows Kerberos allows an authorized local attacker to elevate privileges by exploiting improper memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62766 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62766.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62766"
    },
    {
      "cve": "CVE-2026-62779",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Schannel component allows an authorized local attacker to elevate privileges by exploiting memory management flaws.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62779 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62779.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62779"
    },
    {
      "cve": "CVE-2026-62798",
      "cwe": {
        "id": "CWE-822",
        "name": "Untrusted Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Untrusted Pointer Dereference",
          "title": "CWE-822"
        },
        {
          "category": "description",
          "text": "An untrusted pointer dereference vulnerability in the Windows Win32K component allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62798 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62798.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62798"
    },
    {
      "cve": "CVE-2026-65785",
      "notes": [
        {
          "category": "description",
          "text": "An uncontrolled resource consumption vulnerability in the Windows DHCP Client enables an unauthorized attacker to cause a denial of service on an adjacent network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65785 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65785.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65785"
    },
    {
      "cve": "CVE-2026-65788",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Desktop Window Manager allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65788 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65788.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65788"
    },
    {
      "cve": "CVE-2026-61357",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Application Information Services allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61357 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61357.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61357"
    },
    {
      "cve": "CVE-2026-61929",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges by exploiting improper memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61929 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61929.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61929"
    },
    {
      "cve": "CVE-2026-61938",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Installer allows an authorized local attacker to elevate privileges by exploiting improper memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-61938 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61938.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-61938"
    },
    {
      "cve": "CVE-2026-62708",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Kernel allows an unauthorized attacker to elevate privileges via a physical attack vector.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62708 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62708.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62708"
    },
    {
      "cve": "CVE-2026-62736",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows DHCP Client enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62736 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62736.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62736"
    },
    {
      "cve": "CVE-2026-62749",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges by exploiting improper memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62749 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62749.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62749"
    },
    {
      "cve": "CVE-2026-62780",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges by exploiting improper memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62780 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62780.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62780"
    },
    {
      "cve": "CVE-2026-62788",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Kernel allows an authorized local attacker to elevate privileges by exploiting improper memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62788 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62788.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62788"
    },
    {
      "cve": "CVE-2026-65776",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in the Windows Win32K component allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65776 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65776.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65776"
    },
    {
      "cve": "CVE-2026-56179",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "notes": [
        {
          "category": "other",
          "text": "Origin Validation Error",
          "title": "CWE-346"
        },
        {
          "category": "description",
          "text": "An origin validation error in Windows Network Address Translation (NAT) enables an unauthorized attacker to perform spoofing attacks over an adjacent network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-56179 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-56179.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-56179"
    },
    {
      "cve": "CVE-2026-62688",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows MIDI Service Module enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62688 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62688.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62688"
    },
    {
      "cve": "CVE-2026-62705",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in the Windows Bind Filter Driver caused by improper synchronization of shared resources allows a local authorized attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62705 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62705.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62705"
    },
    {
      "cve": "CVE-2026-66804",
      "notes": [
        {
          "category": "description",
          "text": "An improper access control vulnerability in the Windows Cross Device Service allows an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-66804 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-66804.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-66804"
    },
    {
      "cve": "CVE-2026-62693",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A race condition in the Windows MIDI Service Module due to improper synchronization of shared resources allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62693 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62693.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62693"
    },
    {
      "cve": "CVE-2026-65783",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65783 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65783.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65783"
    },
    {
      "cve": "CVE-2026-70348",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "description",
          "text": "An improper link resolution vulnerability in Windows Management Services allows an authorized local attacker to cause a denial of service by exploiting link following before file access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-70348 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70348.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-70348"
    },
    {
      "cve": "CVE-2026-65779",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65779 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65779.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65779"
    },
    {
      "cve": "CVE-2026-65780",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Double Free",
          "title": "CWE-415"
        },
        {
          "category": "description",
          "text": "A double free vulnerability in Windows Autopilot allows an authorized attacker to locally elevate privileges by exploiting improper memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65780 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65780.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65780"
    },
    {
      "cve": "CVE-2026-65778",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65778 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65778.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65778"
    },
    {
      "cve": "CVE-2026-65782",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65782 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65782.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65782"
    },
    {
      "cve": "CVE-2026-65781",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Windows Autopilot allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-65781 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65781.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-65781"
    },
    {
      "cve": "CVE-2026-62772",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) enables an authorized local attacker to elevate privileges on affected systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62772 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62772.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62772"
    },
    {
      "cve": "CVE-2026-62775",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        },
        {
          "category": "description",
          "text": "An incorrect authorization vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized local attacker to disclose sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62775 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62775.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62775"
    },
    {
      "cve": "CVE-2026-62799",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow vulnerability in the Windows SMB Client enables an authorized attacker to locally elevate privileges by exploiting memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62799 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62799.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62799"
    },
    {
      "cve": "CVE-2026-62824",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in the Remote Desktop Client enables unauthorized attackers to execute arbitrary code remotely over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62824 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62824.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-62824"
    },
    {
      "cve": "CVE-2026-59124",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        },
        {
          "category": "description",
          "text": "A deserialization vulnerability in Microsoft High Performance Computing (HPC) Pack allows unauthorized remote code execution via untrusted data over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59124 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59124.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59124"
    },
    {
      "cve": "CVE-2026-59133",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "notes": [
        {
          "category": "other",
          "text": "Execution with Unnecessary Privileges",
          "title": "CWE-250"
        },
        {
          "category": "description",
          "text": "A vulnerability in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to execute code with unnecessary privileges, enabling privilege escalation over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17",
          "CSAFPID-18",
          "CSAFPID-19",
          "CSAFPID-20",
          "CSAFPID-21",
          "CSAFPID-22",
          "CSAFPID-23",
          "CSAFPID-24",
          "CSAFPID-25",
          "CSAFPID-26",
          "CSAFPID-27",
          "CSAFPID-28",
          "CSAFPID-29",
          "CSAFPID-30"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59133 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59133.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17",
            "CSAFPID-18",
            "CSAFPID-19",
            "CSAFPID-20",
            "CSAFPID-21",
            "CSAFPID-22",
            "CSAFPID-23",
            "CSAFPID-24",
            "CSAFPID-25",
            "CSAFPID-26",
            "CSAFPID-27",
            "CSAFPID-28",
            "CSAFPID-29",
            "CSAFPID-30"
          ]
        }
      ],
      "title": "CVE-2026-59133"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-62715 (GCVE-0-2026-62715)

CERTFR-2026-AVI-1001

Solutions

GHSA-RPCH-9PG9-35R7

NCSC-2026-0284

Tags

Sightings

Nomenclature