Report Name: Microsoft Patch Tuesday, October 2026Generated: 2026-10-20 17:51:37
| Product Name | Prevalence | U | C | H | M | L | A | Comment |
|---|---|---|---|---|---|---|---|---|
| Linux Kernel | 0.9 | 1 | 1 | The Linux kernel is a free and open-source, monolithic, modular, multitasking, Unix-like operating system kernel | ||||
| Windows Container Isolation FS Filter Driver | 0.9 | 1 | 1 | Windows component | ||||
| Windows DNS Server | 0.9 | 2 | 2 | Windows component | ||||
| Windows Kernel | 0.9 | 40 | 6 | 46 | Windows Kernel | |||
| Windows NTLM | 0.9 | 1 | 1 | A suite of security protocols to authenticate users' identity and protect the integrity and confidentiality of their activity | ||||
| Windows SMB Client | 0.9 | 2 | 2 | Windows component | ||||
| Windows TCP/IP | 0.9 | 8 | 8 | Windows component | ||||
| Windows Win32k | 0.9 | 29 | 2 | 31 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |||
| .NET Framework | 0.8 | 5 | 1 | 6 | .NET Framework | |||
| ASP.NET Core | 0.8 | 12 | 1 | 13 | An open-source, server-side web-application framework designed for web development | |||
| Kernel Streaming Service Driver | 0.8 | 2 | 2 | 4 | The Kernel Streaming Service Driver is a Windows kernel-mode component that manages low-latency, real-time streaming of multimedia data between hardware devices and applications | |||
| Microsoft Bluetooth Driver | 0.8 | 1 | 2 | 3 | Microsoft Bluetooth Driver | |||
| Microsoft COM | 0.8 | 1 | 1 | COM is a platform-independent, distributed, object-oriented system for creating binary software components that can interact | ||||
| Microsoft Defender | 0.8 | 1 | 1 | 2 | Anti-malware component of Microsoft Windows | |||
| Microsoft Exchange | 0.8 | 4 | 2 | 6 | Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft | |||
| Microsoft Office | 0.8 | 2 | 2 | Microsoft Office is a suite of applications designed to help with productivity and completing common tasks on a computer | ||||
| Microsoft OpenSSH for Windows | 0.8 | 6 | 2 | 8 | Windows component | |||
| Microsoft PowerShell | 0.8 | 7 | 7 | PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language | ||||
| Microsoft Windows Codecs Library | 0.8 | 1 | 1 | Windows component | ||||
| Microsoft Windows Media Foundation | 0.8 | 9 | 9 | Windows component | ||||
| Microsoft Windows PDF | 0.8 | 1 | 1 | Windows component | ||||
| Microsoft Windows QoS Scheduler Driver | 0.8 | 1 | 1 | Windows component | ||||
| Microsoft Windows Search Component | 0.8 | 12 | 11 | 23 | Windows component | |||
| Microsoft Windows VMSwitch | 0.8 | 1 | 1 | Windows component | ||||
| Quality Windows Audio/Video Experience (QWAVE) service | 0.8 | 1 | 1 | Windows component | ||||
| Secure Boot | 0.8 | 1 | 1 | Secure boot is a security standard developed by members of the PC industry to help make sure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM) | ||||
| Windows Domain Name Service | 0.8 | 9 | 9 | Windows component | ||||
| Windows AI | 0.8 | 1 | 1 | Windows component | ||||
| Windows ALPC | 0.8 | 2 | 2 | Windows component | ||||
| Windows Active Directory Domain Services | 0.8 | 5 | 5 | Windows component | ||||
| Windows Advanced Rasterization Platform | 0.8 | 1 | 1 | Windows component | ||||
| Windows Aggregated Data Platform Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Ancillary Function Driver for WinSock | 0.8 | 2 | 6 | 8 | Windows component | |||
| Windows AppX Deployment Extensions | 0.8 | 1 | 1 | Windows component | ||||
| Windows AppX Deployment Service | 0.8 | 2 | 4 | 6 | Windows component | |||
| Windows Application Compatibility Cache | 0.8 | 1 | 1 | Windows component | ||||
| Windows Assigned Access | 0.8 | 1 | 1 | Windows component | ||||
| Windows Audio Service | 0.8 | 1 | 6 | 7 | Windows component | |||
| Windows Autopilot | 0.8 | 2 | 2 | Windows component | ||||
| Windows Background Intelligent Transfer Service (BITS) | 0.8 | 9 | 1 | 10 | Windows component | |||
| Windows Backup Engine | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows Bind Filter Driver | 0.8 | 4 | 3 | 7 | Windows component | |||
| Windows Biometric Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows BitLocker | 0.8 | 4 | 1 | 5 | Windows component | |||
| Windows Bluetooth | 0.8 | 2 | 2 | Windows component | ||||
| Windows Bluetooth A2DP driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Bluetooth Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Bluetooth Port Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Bluetooth Service | 0.8 | 2 | 2 | Windows component | ||||
| Windows Broadcast DVR User Service | 0.8 | 5 | 15 | 20 | Windows component | |||
| Windows CCFFilter Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows CD-ROM Driver | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows CD-ROM File System Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows COM+ Event System Service | 0.8 | 3 | 1 | 4 | Windows component | |||
| Windows Camera Frame Server Monitor | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows Cash Drawer Protocol Provider | 0.8 | 1 | 1 | Windows component | ||||
| Windows Certificates | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Client License Service | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Client Side Caching driver (csc.sys) | 0.8 | 2 | 2 | Windows component | ||||
| Windows Client for NFS | 0.8 | 4 | 4 | Windows component | ||||
| Windows Client-Side Caching (CSC) Service | 0.8 | 3 | 1 | 4 | Windows component | |||
| Windows Clipboard Server | 0.8 | 1 | 1 | Windows component | ||||
| Windows Clipboard User Service | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Cloud Files Mini Filter Driver | 0.8 | 3 | 3 | Windows component | ||||
| Windows Common Log File System Driver | 0.8 | 2 | 3 | 5 | Common Log File System is a general-purpose logging subsystem that is accessible to both kernel-mode as well as user-mode applications for building high-performance transaction logs | |||
| Windows Composite Image File System | 0.8 | 2 | 2 | Windows component | ||||
| Windows Connected Devices Platform Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Connected User Experiences and Telemetry | 0.8 | 1 | 1 | Windows component | ||||
| Windows Console Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Container Isolation FS Filter Driver (unionfs.sys) | 0.8 | 3 | 3 | 6 | Windows component | |||
| Windows Core Messaging | 0.8 | 2 | 2 | Windows component | ||||
| Windows Credential Guard | 0.8 | 1 | 1 | Windows component | ||||
| Windows Credential Manager | 0.8 | 1 | 1 | Windows component | ||||
| Windows Credential Providers | 0.8 | 1 | 1 | Windows component | ||||
| Windows Cryptographic Services | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows DCOM Server | 0.8 | 1 | 1 | Windows component | ||||
| Windows DHCP Client | 0.8 | 2 | 2 | Windows component | ||||
| Windows DHCP Server | 0.8 | 12 | 4 | 16 | Windows component | |||
| Windows DNS | 0.8 | 5 | 1 | 6 | Windows component | |||
| Windows DWM Core Library | 0.8 | 6 | 7 | 13 | Windows component | |||
| Windows Defender Firewall Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Deployment Services | 0.8 | 1 | 1 | Windows component | ||||
| Windows Device Association Service | 0.8 | 2 | 9 | 11 | Windows component | |||
| Windows Device Install Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Devices Human Interface | 0.8 | 1 | 1 | Windows component | ||||
| Windows Diagnostic Policy Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Direct Composition | 0.8 | 8 | 1 | 9 | Windows component | |||
| Windows Distributed File System (DFS) | 0.8 | 3 | 1 | 4 | Windows component | |||
| Windows EAPHost Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Embedded Mode Service | 0.8 | 2 | 2 | Windows component | ||||
| Windows Encrypting File System (EFS) | 0.8 | 3 | 3 | 6 | Windows component | |||
| Windows Enterprise App Management | 0.8 | 1 | 1 | Windows component | ||||
| Windows Error Reporting | 0.8 | 14 | 7 | 21 | Windows component | |||
| Windows Error Reporting Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Event Logging Service | 0.8 | 1 | 3 | 4 | Windows component | |||
| Windows Event Tracing | 0.8 | 2 | 3 | 5 | Windows component | |||
| Windows Event Viewer | 0.8 | 1 | 1 | Windows component | ||||
| Windows Failover Cluster | 0.8 | 3 | 3 | Windows component | ||||
| Windows Fast FAT Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Fast FAT File System Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Fax and Scan Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows GDI | 0.8 | 6 | 6 | Windows component | ||||
| Windows GDI+ | 0.8 | 1 | 1 | Windows component | ||||
| Windows Geotag Broker | 0.8 | 1 | 1 | Windows component | ||||
| Windows Graphics Component | 0.8 | 3 | 3 | Windows component | ||||
| Windows Graphics Kernel | 0.8 | 2 | 3 | 5 | Windows component | |||
| Windows Group Policy | 0.8 | 2 | 2 | Windows component | ||||
| Windows Health and Optimized Experiences Service | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Hello | 0.8 | 1 | 6 | 7 | Windows component | |||
| Windows Host Guardian Service | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows Human Interface Device | 0.8 | 3 | 3 | Windows component | ||||
| Windows IP Over USB Service | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Image Acquisition | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows Imaging Component | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows Input System | 0.8 | 1 | 1 | Windows component | ||||
| Windows Installer | 0.8 | 8 | 30 | 38 | Windows component | |||
| Windows Internal System User Profile | 0.8 | 1 | 1 | Windows component | ||||
| Windows Internet (wininet.dll) | 0.8 | 2 | 2 | Windows component | ||||
| Windows Internet Information Services | 0.8 | 2 | 2 | Windows component | ||||
| Windows Internet Key Exchange (IKE) Extension | 0.8 | 3 | 3 | Windows component | ||||
| Windows Kerberos | 0.8 | 1 | 3 | 4 | Windows component | |||
| Windows Kernel-Mode Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Kernel-Mode Drivers | 0.8 | 5 | 5 | 10 | Windows component | |||
| Windows Key Distribution Center | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Key Storage Provider | 0.8 | 2 | 2 | Windows component | ||||
| Windows Local Security Authority (LSA) | 0.8 | 1 | 1 | Windows component | ||||
| Windows Local Security Authority Subsystem Service (LSASS) | 0.8 | 5 | 5 | Windows component | ||||
| Windows MIDI Service Module | 0.8 | 1 | 1 | Windows component | ||||
| Windows MIDI Service Module | 0.8 | 1 | 2 | 3 | Windows component | |||
| Windows Management Instrumentation | 0.8 | 3 | 4 | 7 | Windows component | |||
| Windows Management Services | 0.8 | 1 | 1 | Windows component | ||||
| Windows Media | 0.8 | 3 | 3 | Windows component | ||||
| Windows Media Player | 0.8 | 1 | 1 | Windows component | ||||
| Windows Media Video Decoder | 0.8 | 1 | 1 | Windows component | ||||
| Windows Message Queuing | 0.8 | 1 | 1 | Windows component | ||||
| Windows Message Queuing Queue Manager | 0.8 | 4 | 2 | 6 | Windows component | |||
| Windows Mobile Broadband | 0.8 | 1 | 1 | Windows component | ||||
| Windows Modern Device Management (MDM) | 0.8 | 3 | 6 | 9 | Windows component | |||
| Windows NDIS | 0.8 | 1 | 1 | Windows component | ||||
| Windows NTFS | 0.8 | 17 | 9 | 26 | The default file system of the Windows NT family | |||
| Windows NetBIOS | 0.8 | 1 | 1 | Windows component | ||||
| Windows Netlogon | 0.8 | 1 | 2 | 3 | Windows component | |||
| Windows Network File System | 0.8 | 1 | 3 | 4 | Windows component | |||
| Windows Network List Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Network Load Balancing | 0.8 | 1 | 1 | Windows component | ||||
| Windows Notification | 0.8 | 1 | 1 | Windows component | ||||
| Windows Now Playing Session Manager | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows OLE | 0.8 | 3 | 3 | Windows component | ||||
| Windows OLE DB | 0.8 | 1 | 1 | Windows component | ||||
| Windows Overlay Filter | 0.8 | 10 | 5 | 15 | Windows component | |||
| Windows PCI Bus Driver | 0.8 | 2 | 2 | Windows component | ||||
| Windows Paint | 0.8 | 1 | 1 | Windows component | ||||
| Windows Partition Management Driver | 0.8 | 5 | 5 | Windows component | ||||
| Windows Perception Simulation Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Performance Monitor | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Phone Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Portable Device Enumerator Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Portable Device File System Driver | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Portable Device MTP Driver | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Print Spooler Components | 0.8 | 4 | 4 | 8 | Windows component | |||
| Windows Program Compatibility Assistant Service | 0.8 | 2 | 5 | 7 | Windows component | |||
| Windows Projected File System | 0.8 | 1 | 3 | 4 | Windows component | |||
| Windows Push Notifications | 0.8 | 1 | 2 | 3 | Windows component | |||
| Windows Raw Image Extension | 0.8 | 1 | 1 | Windows component | ||||
| Windows Registry | 0.8 | 1 | 1 | Windows component | ||||
| Windows Reliable Multicast Transport Driver (RMCAST) | 0.8 | 1 | 1 | Windows component | ||||
| Windows Remote Access Connection Manager | 0.8 | 2 | 2 | Windows component | ||||
| Windows Remote Access Service Infrastructure | 0.8 | 1 | 1 | Windows component | ||||
| Windows Remote Desktop | 0.8 | 1 | 1 | Windows component | ||||
| Windows Remote Desktop Client | 0.8 | 19 | 19 | Remote Desktop Protocol Client | ||||
| Windows Remote Desktop Gateway (RD Gateway) | 0.8 | 1 | 1 | Windows component | ||||
| Windows Remote Desktop Protocol | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows Remote Desktop Services | 0.8 | 2 | 2 | Remote Desktop Services, known as Terminal Services in Windows Server 2008 and earlier, is one of the components of Microsoft Windows that allow a user to initiate and control an interactive session on a remote computer or virtual machine over a network connection | ||||
| Windows Remote POS Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Resilient File System (ReFS) | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows Resilient File System (ReFS) Deduplication Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Resource Management (MRM) | 0.8 | 1 | 1 | Windows component | ||||
| Windows Resume | 0.8 | 1 | 1 | Windows component | ||||
| Windows Rich Text Edit Control | 0.8 | 2 | 2 | Windows component | ||||
| Windows Routing and Remote Access Service (RRAS) | 0.8 | 9 | 4 | 13 | Windows component | |||
| Windows SMB Server | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows Schannel | 0.8 | 2 | 2 | 4 | Windows component | |||
| Windows Search Service | 0.8 | 2 | 4 | 6 | Windows component | |||
| Windows Secure Kernel Mode | 0.8 | 3 | 3 | Windows component | ||||
| Windows Secure Socket Tunneling Protocol (SSTP) | 0.8 | 2 | 2 | Windows component | ||||
| Windows Security Account Manager | 0.8 | 1 | 1 | Windows component | ||||
| Windows Security App | 0.8 | 1 | 1 | Windows component | ||||
| Windows Security Support Provider Interface | 0.8 | 1 | 1 | Windows component | ||||
| Windows Sensor Data Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows Server Update Service | 0.8 | 3 | 3 | Windows component | ||||
| Windows Server for NFS | 0.8 | 1 | 1 | Windows component | ||||
| Windows Setup Files Cleanup | 0.8 | 1 | 3 | 4 | Windows component | |||
| Windows Setup and Deployment | 0.8 | 1 | 1 | Windows component | ||||
| Windows Shell | 0.8 | 1 | 5 | 2 | 8 | Windows component | ||
| Windows Smart Card | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows SmartScreen | 0.8 | 3 | 2 | 5 | SmartScreen is a cloud-based anti-phishing and anti-malware component included in several Microsoft products, including operating systems Windows 8 and later, the applications Internet Explorer, Microsoft Edge | |||
| Windows Spaceport.sys | 0.8 | 5 | 5 | Windows component | ||||
| Windows StateRepository API | 0.8 | 3 | 1 | 4 | Windows component | |||
| Windows Storage | 0.8 | 1 | 10 | 11 | Windows component | |||
| Windows Storage Port Driver | 0.8 | 1 | 2 | 3 | Windows component | |||
| Windows Storage Spaces Controller | 0.8 | 3 | 2 | 5 | Windows component | |||
| Windows Storage VSP Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Storport Miniport Driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Subsystem for Linux | 0.8 | 3 | 1 | 4 | Windows component | |||
| Windows Sysmain Service | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows System Information Console | 0.8 | 1 | 1 | Windows component | ||||
| Windows TCP/IP Local | 0.8 | 1 | 1 | Windows component | ||||
| Windows Telephony Server | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows Text Services Framework | 0.8 | 1 | 1 | Windows component | ||||
| Windows Text Shaping | 0.8 | 4 | 4 | Windows component | ||||
| Windows UI Immersive Server API | 0.8 | 1 | 1 | Windows component | ||||
| Windows USB Driver | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows USB Print Driver | 0.8 | 8 | 8 | Windows component | ||||
| Windows USB Video Driver | 0.8 | 2 | 2 | Windows component | ||||
| Windows Universal Disk Format File System Driver (UDFS) | 0.8 | 12 | 4 | 16 | Windows component | |||
| Windows Universal Plug and Play (UPnP) Device Host | 0.8 | 3 | 1 | 4 | Windows component | |||
| Windows Update | 0.8 | 6 | 2 | 8 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |||
| Windows Update Delivery Optimization | 0.8 | 1 | 1 | Windows component | ||||
| Windows Update Orchestrator Service | 0.8 | 2 | 5 | 7 | Windows component | |||
| Windows Update Service | 0.8 | 2 | 3 | 5 | Windows component | |||
| Windows Update Stack | 0.8 | 2 | 2 | Windows component | ||||
| Windows User Profile Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows VHD miniport driver | 0.8 | 1 | 1 | Windows component | ||||
| Windows Virtual Input | 0.8 | 1 | 1 | Windows component | ||||
| Windows Virtualization-Based Security (VBS) Enclave | 0.8 | 4 | 4 | 8 | Windows component | |||
| Windows Volume Manager Extension Driver | 0.8 | 2 | 1 | 3 | Windows component | |||
| Windows WLAN Service | 0.8 | 1 | 1 | 2 | Windows component | |||
| Windows WalletService | 0.8 | 1 | 1 | Windows component | ||||
| Windows Wi-Fi Driver | 0.8 | 2 | 2 | Windows component | ||||
| Windows Win32 Kernel Subsystem | 0.8 | 6 | 8 | 14 | Windows component | |||
| Windows Wired AutoConfig Service | 0.8 | 2 | 2 | Windows component | ||||
| Windows Work Folders | 0.8 | 1 | 1 | Windows component | ||||
| Windows Workstation Service | 0.8 | 1 | 1 | Windows component | ||||
| Windows exFAT File System | 0.8 | 2 | 2 | Windows component | ||||
| Windows iSCSI | 0.8 | 9 | 1 | 10 | Windows component | |||
| Windows kernel32.dll | 0.8 | 1 | 1 | Windows component | ||||
| Windows libarchive | 0.8 | 3 | 2 | 5 | Windows component | |||
| Windows rndismp6.sys | 0.8 | 1 | 1 | Windows component | ||||
| .NET | 0.7 | 14 | 11 | 25 | .NET | |||
| .NET and Visual Studio | 0.7 | 1 | 1 | .NET and Visual Studio | ||||
| Clipboard User Service | 0.7 | 3 | 3 | Clipboard User Service | ||||
| HEVC Video Extensions | 0.7 | 1 | 1 | HEVC Video Extensions | ||||
| RPC Endpoint Mapper Service | 0.7 | 1 | 1 | RPC Endpoint Mapper Service | ||||
| Raw Image Extension | 0.7 | 1 | 1 | Raw Image Extension | ||||
| SQLite | 0.7 | 1 | 1 | SQLite is a database engine written in the C programming language | ||||
| Windows IKE Extension | 0.7 | 2 | 1 | 3 | Internet Key Exchange (IKE, sometimes IKEv1 or IKEv2, depending on version) is the protocol used to set up a security association (SA) in the IPsec protocol suite | |||
| Windows Mobile Device Management | 0.7 | 1 | 1 | Windows component | ||||
| Windows Security Center | 0.7 | 2 | 2 | Windows Security Center (WSC) is a comprehensive reporting tool that helps users establish and maintain a protective security layer around their computer systems | ||||
| Internet Explorer | 0.6 | 1 | 1 | Internet Explorer is a discontinued series of graphical web browsers developed by Microsoft | ||||
| Microsoft Excel | 0.6 | 1 | 1 | MS Office product | ||||
| Microsoft Internet Messaging API | 0.6 | 1 | 1 | 2 | Microsoft Internet Messaging API | |||
| Microsoft Office Graphics | 0.6 | 1 | 1 | Microsoft Office Graphics | ||||
| Microsoft Office Graphics Component | 0.6 | 1 | 1 | Microsoft Office | ||||
| Microsoft Office Visio | 0.6 | 3 | 3 | Microsoft Visio | ||||
| Microsoft Scripting Engine | 0.6 | 1 | 1 | Microsoft Scripting Engine | ||||
| Python | 0.6 | 1 | 1 | Python is a high-level, general-purpose programming language | ||||
| Skype for Business | 0.6 | 3 | 3 | Skype for Business | ||||
| Windows Hyper-V | 0.6 | 4 | 14 | 18 | Hardware virtualization component of the client editions of Windows NT | |||
| Active Directory Certificate Services (AD CS) | 0.5 | 1 | 1 | Active Directory Certificate Services (AD CS) | ||||
| Active Directory Federation Services (AD FS) | 0.5 | 14 | 14 | Active Directory Federation Services (AD FS) | ||||
| Azure Active Directory | 0.5 | 1 | 1 | Azure Active Directory | ||||
| Azure Arc | 0.5 | 1 | 1 | Azure Arc | ||||
| Azure CycleCloud | 0.5 | 1 | 1 | Azure CycleCloud | ||||
| Azure DevOps | 0.5 | 1 | 1 | Azure DevOps | ||||
| Azure HDInsight | 0.5 | 1 | 1 | Azure HDInsight | ||||
| Azure Key Vault | 0.5 | 2 | 2 | Azure Key Vault | ||||
| Azure Key Vault Client SDK | 0.5 | 1 | 1 | Azure Key Vault Client SDK | ||||
| Azure Storage Library | 0.5 | 1 | 1 | Azure Storage Library | ||||
| Configuration Manager | 0.5 | 1 | 1 | Configuration Manager | ||||
| Connected Devices Platform Service (Cdpsvc) | 0.5 | 2 | 2 | Connected Devices Platform Service (Cdpsvc) | ||||
| Desktop Window Manager | 0.5 | 8 | 8 | Desktop Window Manager | ||||
| Function Discovery Service (fdwsd.dll) | 0.5 | 1 | 1 | Function Discovery Service (fdwsd.dll) | ||||
| Graphic Fonts | 0.5 | 1 | 1 | Graphic Fonts | ||||
| HID Class Driver | 0.5 | 3 | 3 | HID Class Driver | ||||
| HID Parser Library | 0.5 | 5 | 5 | HID Parser Library | ||||
| HTTP.sys | 0.5 | 4 | 4 | HTTP.sys | ||||
| Internet Connection Sharing (ICS) | 0.5 | 1 | 1 | Internet Connection Sharing (ICS) | ||||
| MessagePack-CSharp | 0.5 | 1 | 1 | MessagePack-CSharp | ||||
| Microsoft Account | 0.5 | 2 | 2 | Microsoft Account | ||||
| Microsoft Azure Attestation service and Device Health Attestation Service | 0.5 | 2 | 2 | Microsoft Azure Attestation service and Device Health Attestation Service | ||||
| Microsoft Configuration Manager | 0.5 | 1 | 1 | Microsoft Configuration Manager | ||||
| Microsoft Digest Authentication | 0.5 | 1 | 1 | Microsoft Digest Authentication | ||||
| Microsoft Dynamics 365 Business Central | 0.5 | 2 | 2 | Microsoft Dynamics 365 Business Central | ||||
| Microsoft Failover Cluster | 0.5 | 1 | 1 | Microsoft Failover Cluster | ||||
| Microsoft Failover Cluster Virtual Driver | 0.5 | 1 | 1 | Microsoft Failover Cluster Virtual Driver | ||||
| Microsoft Graphics Component | 0.5 | 1 | 3 | 4 | Microsoft Graphics Component | |||
| Microsoft Input Method Editor (IME) | 0.5 | 1 | 1 | Microsoft Input Method Editor (IME) | ||||
| Microsoft Internet Information Services | 0.5 | 1 | 1 | Microsoft Internet Information Services | ||||
| Microsoft Local Security Authority (LSA) Server | 0.5 | 2 | 2 | Microsoft Local Security Authority (LSA) Server | ||||
| Microsoft Microsoft Defender for Endpoint | 0.5 | 1 | 1 | Microsoft Microsoft Defender for Endpoint | ||||
| Microsoft Office Access | 0.5 | 12 | 1 | 13 | Microsoft Office Access | |||
| Microsoft Office Click-To-Run | 0.5 | 4 | 4 | Microsoft Office Click-To-Run | ||||
| Microsoft Office Excel | 0.5 | 49 | 19 | 68 | Microsoft Office Excel | |||
| Microsoft Office OneNote | 0.5 | 2 | 1 | 3 | Microsoft Office OneNote | |||
| Microsoft Office Outlook | 0.5 | 9 | 1 | 10 | Microsoft Office Outlook | |||
| Microsoft Office PowerPoint | 0.5 | 5 | 4 | 9 | Microsoft Office PowerPoint | |||
| Microsoft Office SharePoint | 0.5 | 17 | 18 | 35 | Microsoft Office SharePoint | |||
| Microsoft Office Word | 0.5 | 13 | 9 | 22 | Microsoft Office Word | |||
| Microsoft PostScript Printer Driver | 0.5 | 3 | 3 | 6 | Microsoft PostScript Printer Driver | |||
| Microsoft Power Apps | 0.5 | 1 | 1 | Microsoft Power Apps | ||||
| Microsoft PowerToys | 0.5 | 2 | 2 | Microsoft PowerToys | ||||
| Microsoft QUIC | 0.5 | 2 | 2 | 4 | Microsoft QUIC | |||
| Microsoft SQL Server | 0.5 | 1 | 19 | 20 | Microsoft SQL Server | |||
| Microsoft SharePoint Server | 0.5 | 1 | 1 | Microsoft SharePoint Server | ||||
| Microsoft Trace Data Helper | 0.5 | 2 | 2 | Microsoft Trace Data Helper | ||||
| Microsoft Virtual Hard Disk | 0.5 | 1 | 1 | The Virtual Hard Disk (Virtual Hard Disk (VHD) Miniport Driver) format is a publicly-available image format specification that allows encapsulation of the hard disk into an individual file. | ||||
| Microsoft XML | 0.5 | 2 | 2 | Microsoft XML | ||||
| Network Device Enrollment Service (NDES) | 0.5 | 1 | 3 | 4 | Network Device Enrollment Service (NDES) | |||
| Network Policy Server (NPS) | 0.5 | 5 | 3 | 8 | Network Policy Server (NPS) | |||
| RPC Runtime | 0.5 | 1 | 3 | 4 | RPC Runtime | |||
| RPC Runtime Library | 0.5 | 2 | 2 | RPC Runtime Library | ||||
| Reliable Multicast Transport Driver (RMCAST) | 0.5 | 1 | 1 | Reliable Multicast Transport Driver (RMCAST) | ||||
| Remote Access Point-to-Point Protocol (PPP) EAP-TLS | 0.5 | 1 | 1 | Remote Access Point-to-Point Protocol (PPP) EAP-TLS | ||||
| Remote Desktop Display Driver | 0.5 | 1 | 1 | Remote Desktop Display Driver | ||||
| Remote Desktop Gateway Service | 0.5 | 1 | 1 | 2 | Remote Desktop Gateway Service | |||
| Remote Desktop Services Remote Code Execution Vulnerability | 0.5 | 1 | 1 | Remote Desktop Services Remote Code Execution Vulnerability | ||||
| Role: DNS Server | 0.5 | 41 | 41 | Role: DNS Server | ||||
| SQL Server | 0.5 | 1 | 1 | 2 | SQL Server | |||
| Servicing Stack Updates | 0.5 | 7 | 7 | Servicing Stack Updates | ||||
| Software Protection Platform (SPP) | 0.5 | 1 | 1 | Software Protection Platform (SPP) | ||||
| SysInternals | 0.5 | 3 | 3 | SysInternals | ||||
| UEFI Secure Boot | 0.5 | 1 | 1 | UEFI Secure Boot | ||||
| Virtual Hard Disk (VHD) Miniport Driver | 0.5 | 2 | 2 | Virtual Hard Disk (VHD) Miniport Driver | ||||
| Visual Studio Tools for Applications and SQL Server Management Studio | 0.5 | 1 | 1 | Visual Studio Tools for Applications and SQL Server Management Studio | ||||
| Web Account Manager | 0.5 | 1 | 1 | Web Account Manager | ||||
| Web Distributed Authoring and Versioning (WEBDAV) | 0.5 | 1 | 1 | Web Distributed Authoring and Versioning (WEBDAV) | ||||
| WebDAV | 0.5 | 2 | 10 | 12 | WebDAV | |||
| Winlogon | 0.5 | 1 | 1 | Winlogon | ||||
| Dynamics Business Central | 0.4 | 2 | 2 | Dynamics Business Central | ||||
| Microsoft MPEG-2 Video Extension | 0.4 | 1 | 1 | This extension helps video apps installed on Windows 10, such as Microsoft Movies & TV, to play MPEG-1 and MPEG-2 videos. | ||||
| Visual Studio Code | 0.3 | 1 | 9 | 10 | Integrated development environment |
| Vulnerability Type | Criticality | U | C | H | M | L | A |
|---|---|---|---|---|---|---|---|
| Remote Code Execution | 1.0 | 1 | 296 | 19 | 316 | ||
| Security Feature Bypass | 0.9 | 1 | 14 | 25 | 40 | ||
| Elevation of Privilege | 0.85 | 1 | 353 | 319 | 673 | ||
| Information Disclosure | 0.83 | 53 | 199 | 252 | |||
| Denial of Service | 0.7 | 45 | 27 | 72 | |||
| Spoofing | 0.4 | 27 | 27 | ||||
| Tampering | 0.3 | 29 | 29 |
| Source | U | C | H | M | L | A |
|---|---|---|---|---|---|---|
| Qualys | 1 | 1 | 2 | |||
| Tenable | 1 | 3 | 1 | 5 | ||
| Rapid7 | 1 | 6 | 7 | |||
| ZDI | 1 | 24 | 10 | 35 |
1. 
Security Feature Bypass - Windows Shell (CVE-2026-96951) - Urgent [820]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 1.0 | 18 | Exploitation in the wild is mentioned on Vulners (cisa_kev object, vulncheck_kev object), Microsoft, NVD:CISAKEV websites | |
| 0.6 | 17 | The existence of a private exploit is mentioned on Microsoft:PrivateExploit:Functional website | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01512, EPSS Percentile is 0.73993 |
Qualys: CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability A command injection flaw in Windows Shell may allow an unauthenticated attacker to bypass a security feature over a network. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, acknowledging its active exploitation. CISA urged users to patch the vulnerability before October 16, 2026.
Tenable: Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)
Tenable: CVE-2026-96951 | Windows Shell security feature bypass vulnerability
Tenable: CVE-2026-96951 is a security feature bypass vulnerability affecting Windows Shell. It received a CVSSv3 score of 8.8 and was rated as important. According to Microsoft, this vulnerability was exploited in the wild as a zero-day.
Rapid7: The Windows Shell is Microsoft’s term for the GUI interaction logic for the entire OS provided by explorer.exe and associated libraries and APIs, and for the second time this year, the Windows Shell is the site of an exploited-in-the-wild zero-day vulnerability. Today’s specimen is CVE-2026-96951. Once again, the immediate prize for an attacker is a Mark of the Web (MOTW) bypass. What this means is that Windows won’t provide the user with a dialog explaining that Windows protected their PC, because in this case, it didn’t. Exploitation requires that a user opens a specially crafted malicious file or visits an attacker-controlled site, so the evergreen advice about being careful what you click remains valid. Fans of vintage operating systems should note that Windows Server 2012 doesn’t receive a patch, although Server 2012 R2 does. The advisory acknowledges reporters from multiple organizations, although none from within Microsoft. The vulnerability also affected Microsoft’s Outlook.com cloud services, although Outlook.com was patched in a build dated several weeks ago.
ZDI: - CVE-2026-96951 - Windows Shell Security Feature Bypass Vulnerability. This is the lone bug listed as under active attack, and it’s certainly a type of bug we’ve seen before. Going back to 2024, attackers have used multiple methods to avoid Mark of the Web (MotW) protections. This time, it’s Shell instead of SmartScreen, but the result is the same. As with any bug under active attack, test and deploy this patch quickly
2. 
Remote Code Execution - Raw Image Extension (CVE-2026-21413) - Critical [688]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 1.0 | 17 | The existence of a publicly available exploit is mentioned on NVD:PublicExploit:www.talosintelligence.com website | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | Raw Image Extension | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00932, EPSS Percentile is 0.59927 |
3. 
Elevation of Privilege - Windows Health and Optimized Experiences Service (CVE-2026-85884) - Critical [618]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 1.0 | 17 | The existence of a publicly available exploit is mentioned on Vulners:PublicExploit:GitHub:BEARDHAMMER:CVE-2026-85884 website | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00394, EPSS Percentile is 0.3198 |
4. Remote Code Execution - Windows DNS Server (CVE-2026-83889) - High [507]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.9 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00913, EPSS Percentile is 0.59285 |
5. Elevation of Privilege - Microsoft Configuration Manager (CVE-2026-70049) - High [506]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0.4 | 17 | The existence of a private exploit is mentioned on Microsoft:PrivateExploit:PoC website | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Configuration Manager | |
| 0.8 | 10 | CVSS Base Score is 8.0. According to Microsoft data source | |
| 0.8 | 10 | EPSS Probability is 0.02275, EPSS Percentile is 0.82767 |
6. Remote Code Execution - .NET Framework (CVE-2026-70035) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | .NET Framework | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01266, EPSS Percentile is 0.69218 |
7. Remote Code Execution - Microsoft OpenSSH for Windows (CVE-2026-97816) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00911, EPSS Percentile is 0.59223 |
8. Remote Code Execution - Microsoft PowerShell (CVE-2026-83578) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00958, EPSS Percentile is 0.60713 |
9. Remote Code Execution - Microsoft Windows Media Foundation (CVE-2026-83517) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00958, EPSS Percentile is 0.60712 |
10. Remote Code Execution - Microsoft Windows Media Foundation (CVE-2026-85814) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00928, EPSS Percentile is 0.59784 |
11. Remote Code Execution - Windows BitLocker (CVE-2026-96909) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58653 |
12. Remote Code Execution - Windows CCFFilter Driver (CVE-2026-83780) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00958, EPSS Percentile is 0.60712 |
13. Remote Code Execution - Windows DHCP Server (CVE-2026-96320) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00928, EPSS Percentile is 0.59785 |
14. Remote Code Execution - Windows Error Reporting (CVE-2026-83519) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00958, EPSS Percentile is 0.60712 |
15. Remote Code Execution - Windows Error Reporting (CVE-2026-83693) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00996, EPSS Percentile is 0.61962 |
16. Remote Code Execution - Windows Imaging Component (CVE-2026-69886) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0079, EPSS Percentile is 0.5535 |
17. Remote Code Execution - Windows Internet Information Services (CVE-2026-70024) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00797, EPSS Percentile is 0.55597 |
18. Remote Code Execution - Windows Local Security Authority Subsystem Service (LSASS) (CVE-2026-96219) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58655 |
19. Remote Code Execution - Windows Message Queuing Queue Manager (CVE-2026-100202) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00997, EPSS Percentile is 0.62018 |
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
20. Remote Code Execution - Windows OLE (CVE-2026-96924) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58654 |
21. Remote Code Execution - Windows Partition Management Driver (CVE-2026-97805) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00956, EPSS Percentile is 0.60653 |
22. Remote Code Execution - Windows Rich Text Edit Control (CVE-2026-70096) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00958, EPSS Percentile is 0.60713 |
23. Remote Code Execution - Windows Routing and Remote Access Service (RRAS) (CVE-2026-85792) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58655 |
24. Remote Code Execution - Windows Routing and Remote Access Service (RRAS) (CVE-2026-85809) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00928, EPSS Percentile is 0.59785 |
25. Remote Code Execution - Windows Shell (CVE-2026-83782) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58654 |
26. Remote Code Execution - Windows System Information Console (CVE-2026-70157) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00958, EPSS Percentile is 0.60713 |
27. Remote Code Execution - Windows Text Shaping (CVE-2026-102210) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58654 |
28. Remote Code Execution - Windows Text Shaping (CVE-2026-83770) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00996, EPSS Percentile is 0.61962 |
29. Remote Code Execution - Windows Text Shaping (CVE-2026-97814) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00986, EPSS Percentile is 0.61669 |
30. Remote Code Execution - Windows iSCSI (CVE-2026-69634) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0079, EPSS Percentile is 0.5535 |
31. Remote Code Execution - Windows iSCSI (CVE-2026-69705) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0079, EPSS Percentile is 0.5535 |
32. Remote Code Execution - Windows iSCSI (CVE-2026-69883) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0079, EPSS Percentile is 0.5535 |
33. Remote Code Execution - Windows libarchive (CVE-2026-69639) - High [502]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0079, EPSS Percentile is 0.55351 |
34. Remote Code Execution - Microsoft OpenSSH for Windows (CVE-2026-83923) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00923, EPSS Percentile is 0.59585 |
35. Remote Code Execution - Microsoft Windows Media Foundation (CVE-2026-70258) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.5692 |
36. Remote Code Execution - Microsoft Windows Media Foundation (CVE-2026-96952) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00798, EPSS Percentile is 0.55639 |
37. Remote Code Execution - Windows Domain Name Service (CVE-2026-70167) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00851, EPSS Percentile is 0.57385 |
38. Remote Code Execution - Windows Domain Name Service (CVE-2026-83642) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56921 |
39. Remote Code Execution - Windows Domain Name Service (CVE-2026-83869) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00648, EPSS Percentile is 0.4993 |
40. Remote Code Execution - Windows Domain Name Service (CVE-2026-96113) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00673, EPSS Percentile is 0.51087 |
ZDI: DNS and DNS Server Bugs: There are 58 CVEs in Windows DNS and DNS Server: 52 tagged DNS Server (role) and six tagged Windows DNS. All 58 are Important, including CVE-2026-96113, an RCE scored at CVSS 9.8. There are still a few where the advisories describe the impact as unauthorized attackers executing code over the network, but without the exact wormable wording. Four of these are untrusted pointer dereferences and one is type confusion. The majority of these bugs (31) are info disclosures. Five are tampering bugs and one is a security feature bypass, but all of these require authentication.
41. Remote Code Execution - Windows Active Directory Domain Services (CVE-2026-88165) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00851, EPSS Percentile is 0.57385 |
42. Remote Code Execution - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-88142) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00851, EPSS Percentile is 0.57385 |
43. Remote Code Execution - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-88159) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01023, EPSS Percentile is 0.628 |
44. Remote Code Execution - Windows CD-ROM File System Driver (CVE-2026-70275) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56923 |
45. Remote Code Execution - Windows DHCP Server (CVE-2026-70058) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.012, EPSS Percentile is 0.67626 |
46. Remote Code Execution - Windows DHCP Server (CVE-2026-70069) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00913, EPSS Percentile is 0.59285 |
47. Remote Code Execution - Windows DHCP Server (CVE-2026-96934) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00728, EPSS Percentile is 0.53206 |
48. Remote Code Execution - Windows Distributed File System (DFS) (CVE-2026-85931) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00851, EPSS Percentile is 0.57386 |
49. Remote Code Execution - Windows Error Reporting (CVE-2026-83643) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56922 |
50. Remote Code Execution - Windows Error Reporting (CVE-2026-83748) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00723, EPSS Percentile is 0.53019 |
51. Remote Code Execution - Windows Error Reporting (CVE-2026-97815) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00687, EPSS Percentile is 0.51685 |
52. Remote Code Execution - Windows GDI (CVE-2026-70089) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56922 |
53. Remote Code Execution - Windows GDI+ (CVE-2026-83934) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00798, EPSS Percentile is 0.55638 |
54. Remote Code Execution - Windows Image Acquisition (CVE-2026-83523) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56924 |
55. Remote Code Execution - Windows Imaging Component (CVE-2026-77496) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56921 |
56. Remote Code Execution - Windows Media Player (CVE-2026-96096) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00673, EPSS Percentile is 0.51088 |
57. Remote Code Execution - Windows Media Video Decoder (CVE-2026-100220) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00839, EPSS Percentile is 0.56978 |
58. Remote Code Execution - Windows Network Load Balancing (CVE-2026-83862) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00648, EPSS Percentile is 0.49929 |
59. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-83688) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.5692 |
60. Remote Code Execution - Windows Routing and Remote Access Service (RRAS) (CVE-2026-70158) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00851, EPSS Percentile is 0.57386 |
61. Remote Code Execution - Windows Text Shaping (CVE-2026-102225) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00798, EPSS Percentile is 0.55638 |
62. Remote Code Execution - Windows Volume Manager Extension Driver (CVE-2026-85928) - High [490]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00648, EPSS Percentile is 0.4993 |
63. Remote Code Execution - .NET (CVE-2026-83520) - High [485]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | .NET | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01266, EPSS Percentile is 0.69219 |
64. Remote Code Execution - .NET Framework (CVE-2026-70007) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | .NET Framework | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00639, EPSS Percentile is 0.49479 |
65. Remote Code Execution - ASP.NET Core (CVE-2026-102870) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00778, EPSS Percentile is 0.54919 |
66. Remote Code Execution - ASP.NET Core (CVE-2026-96230) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00778, EPSS Percentile is 0.5492 |
67. Remote Code Execution - Microsoft Exchange (CVE-2026-70571) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00927, EPSS Percentile is 0.59737 |
Tenable: CVE-2026-70571 | Microsoft Exchange Server remote code execution vulnerability
Tenable: CVE-2026-70571 is a remote code execution vulnerability affecting Microsoft Exchange Server. It received a CVSSv3 score of 8.1 and is rated as critical. It was assessed as “Exploitation More Likely.”
ZDI: - CVE-2026-70571 - Microsoft Exchange Server Remote Code Execution Vulnerability. Technically speaking, this is a wormable bug in Exchange Server. However, I wouldn’t count on that happening. Microsoft states, “Exploitation requires an attacker to have a deep understanding of the target environment and is not guaranteed to succeed.” While the wording is obtuse, it generally means the likelihood of stars aligning to exploit the Exchange Server through this bug is minuscule.
68. Remote Code Execution - Microsoft Office (CVE-2026-88196) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Microsoft Office is a suite of applications designed to help with productivity and completing common tasks on a computer | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.5357 |
69. Remote Code Execution - Microsoft PowerShell (CVE-2026-85817) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53573 |
70. Remote Code Execution - Microsoft Windows Search Component (CVE-2026-83725) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00607, EPSS Percentile is 0.47898 |
71. Remote Code Execution - Windows Domain Name Service (CVE-2026-85903) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00557, EPSS Percentile is 0.45152 |
72. Remote Code Execution - Windows Domain Name Service (CVE-2026-88112) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00557, EPSS Percentile is 0.45152 |
73. Remote Code Execution - Windows Domain Name Service (CVE-2026-88114) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00557, EPSS Percentile is 0.45152 |
74. Remote Code Execution - Windows Domain Name Service (CVE-2026-88116) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00557, EPSS Percentile is 0.45153 |
75. Remote Code Execution - Windows DNS (CVE-2026-70119) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01137, EPSS Percentile is 0.6596 |
76. Remote Code Execution - Windows Encrypting File System (EFS) (CVE-2026-83759) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00716, EPSS Percentile is 0.52783 |
77. Remote Code Execution - Windows Event Tracing (CVE-2026-83874) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00767, EPSS Percentile is 0.54597 |
78. Remote Code Execution - Windows GDI (CVE-2026-83929) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00607, EPSS Percentile is 0.47899 |
79. Remote Code Execution - Windows Local Security Authority Subsystem Service (LSASS) (CVE-2026-83928) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00577, EPSS Percentile is 0.46305 |
80. Remote Code Execution - Windows Partition Management Driver (CVE-2026-83797) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00767, EPSS Percentile is 0.54596 |
81. Remote Code Execution - Windows Raw Image Extension (CVE-2026-96943) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00601, EPSS Percentile is 0.47615 |
82. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-103575) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00767, EPSS Percentile is 0.54596 |
83. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-108458) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00767, EPSS Percentile is 0.54597 |
84. Remote Code Execution - Windows Routing and Remote Access Service (RRAS) (CVE-2026-85339) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00557, EPSS Percentile is 0.45153 |
85. Remote Code Execution - Windows Server for NFS (CVE-2026-88115) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00557, EPSS Percentile is 0.45153 |
86. Remote Code Execution - Windows Shell (CVE-2026-85936) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00557, EPSS Percentile is 0.45153 |
87. Remote Code Execution - Windows Storport Miniport Driver (CVE-2026-69765) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00664, EPSS Percentile is 0.50678 |
88. Remote Code Execution - Windows iSCSI (CVE-2026-69521) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00664, EPSS Percentile is 0.50679 |
89. Remote Code Execution - Windows libarchive (CVE-2026-69985) - High [478]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00664, EPSS Percentile is 0.50678 |
90. Elevation of Privilege - Microsoft Exchange (CVE-2026-87692) - High [475]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.8 | 10 | EPSS Probability is 0.01587, EPSS Percentile is 0.75151 |
91. Elevation of Privilege - Microsoft Windows Media Foundation (CVE-2026-96186) - High [475]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.8 | 10 | EPSS Probability is 0.0165, EPSS Percentile is 0.7608 |
92. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-105010) - High [475]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58653 |
93. Elevation of Privilege - Windows Management Instrumentation (CVE-2026-88091) - High [475]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.8 | 10 | EPSS Probability is 0.02137, EPSS Percentile is 0.81668 |
94. Remote Code Execution - .NET (CVE-2026-70174) - High [473]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | .NET | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00805, EPSS Percentile is 0.55878 |
95. Remote Code Execution - .NET (CVE-2026-87697) - High [473]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | .NET | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00842, EPSS Percentile is 0.57091 |
96. Remote Code Execution - HEVC Video Extensions (CVE-2026-108400) - High [473]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | HEVC Video Extensions | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00798, EPSS Percentile is 0.55637 |
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
97. Security Feature Bypass - ASP.NET Core (CVE-2026-70188) - High [472]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.9 | 10 | CVSS Base Score is 9.1. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00827, EPSS Percentile is 0.56622 |
98. Security Feature Bypass - Windows SmartScreen (CVE-2026-108463) - High [472]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | SmartScreen is a cloud-based anti-phishing and anti-malware component included in several Microsoft products, including operating systems Windows 8 and later, the applications Internet Explorer, Microsoft Edge | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00879, EPSS Percentile is 0.58273 |
99. Remote Code Execution - Windows TCP/IP (CVE-2026-69913) - High [471]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.9 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00552, EPSS Percentile is 0.44846 |
100. Elevation of Privilege - Windows SMB Client (CVE-2026-83789) - High [468]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00767, EPSS Percentile is 0.54596 |
101. Remote Code Execution - Microsoft Office (CVE-2026-88197) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Microsoft Office is a suite of applications designed to help with productivity and completing common tasks on a computer | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00535, EPSS Percentile is 0.4386 |
102. Remote Code Execution - Microsoft OpenSSH for Windows (CVE-2026-83754) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00598, EPSS Percentile is 0.47422 |
103. Remote Code Execution - Microsoft OpenSSH for Windows (CVE-2026-88157) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00535, EPSS Percentile is 0.4386 |
104. Remote Code Execution - Microsoft PowerShell (CVE-2026-96251) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00535, EPSS Percentile is 0.4386 |
105. Remote Code Execution - Microsoft Windows PDF (CVE-2026-108457) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00688, EPSS Percentile is 0.5172 |
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
106. Remote Code Execution - Windows Domain Name Service (CVE-2026-70127) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00723, EPSS Percentile is 0.53026 |
107. Remote Code Execution - Windows Active Directory Domain Services (CVE-2026-70229) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.0071, EPSS Percentile is 0.5253 |
Tenable: CVE-2026-70229 | Windows Active Directory Domain Services remote code execution vulnerability
Tenable: CVE-2026-70229 is an RCE vulnerability affecting Windows Active Directory Domain Services (AD DS). It received a CVSSv3 score of 8.1 and is rated as critical. Microsoft assesses this vulnerability as “Exploitation More Likely” according to Microsoft’s Exploitability Index.
108. Remote Code Execution - Windows Cryptographic Services (CVE-2026-70014) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00663, EPSS Percentile is 0.50617 |
109. Remote Code Execution - Windows DHCP Server (CVE-2026-88119) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00688, EPSS Percentile is 0.5172 |
110. Remote Code Execution - Windows DHCP Server (CVE-2026-88120) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00688, EPSS Percentile is 0.51719 |
111. Remote Code Execution - Windows DHCP Server (CVE-2026-88171) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00688, EPSS Percentile is 0.5172 |
ZDI: Windows DHCP Client and Server: There are 18 CVEs in Windows DHCP: 16 in DHCP Server and 2 in DHCP Client. We’ve already discussed the wormable ones, so I won’t rehash them here. Of the remaining 12 DHCP bugs, two are Critical. CVE-2026-88171 is an unauthenticated double free in DHCP Server that just misses being wormable, and CVE-2026-70250 is a DHCP Client use-after-free that requires an adjacent network. The rest are a mix of authenticated RCEs, two unauthenticated DoS bugs, two EoPs and two security feature bypasses, none rated above “Exploitation Less Likely” by Microsoft.
112. Remote Code Execution - Windows Distributed File System (DFS) (CVE-2026-85798) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.2. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00888, EPSS Percentile is 0.58517 |
113. Remote Code Execution - Windows Event Logging Service (CVE-2026-83856) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45899 |
114. Remote Code Execution - Windows Media (CVE-2026-96071) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45896 |
115. Remote Code Execution - Windows Message Queuing (CVE-2026-108460) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00688, EPSS Percentile is 0.51719 |
116. Remote Code Execution - Windows Paint (CVE-2026-83844) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00648, EPSS Percentile is 0.4994 |
117. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69976) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45899 |
118. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69984) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45898 |
119. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69986) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45896 |
120. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69987) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45896 |
121. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69988) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45897 |
122. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69991) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45897 |
123. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69994) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45897 |
124. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69995) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.459 |
125. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69996) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.459 |
126. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69997) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45899 |
127. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-69998) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45899 |
128. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-70004) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45896 |
129. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-70006) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45898 |
130. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-70012) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45895 |
131. Remote Code Execution - Windows Remote Desktop Client (CVE-2026-97789) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45898 |
132. Remote Code Execution - Windows Remote Desktop Services (CVE-2026-70187) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Services, known as Terminal Services in Windows Server 2008 and earlier, is one of the components of Microsoft Windows that allow a user to initiate and control an interactive session on a remote computer or virtual machine over a network connection | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00688, EPSS Percentile is 0.51719 |
ZDI: Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs.
133. Remote Code Execution - Windows Remote Desktop Services (CVE-2026-84012) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Remote Desktop Services, known as Terminal Services in Windows Server 2008 and earlier, is one of the components of Microsoft Windows that allow a user to initiate and control an interactive session on a remote computer or virtual machine over a network connection | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51103 |
134. Remote Code Execution - Windows Schannel (CVE-2026-105005) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51103 |
135. Remote Code Execution - Windows Secure Socket Tunneling Protocol (SSTP) (CVE-2026-85926) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51103 |
136. Remote Code Execution - Windows iSCSI (CVE-2026-70038) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51102 |
137. Remote Code Execution - Windows iSCSI (CVE-2026-70095) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.0057, EPSS Percentile is 0.45946 |
138. Remote Code Execution - Windows libarchive (CVE-2026-70062) - High [466]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00695, EPSS Percentile is 0.51971 |
139. Remote Code Execution - Microsoft Dynamics 365 Business Central (CVE-2026-100214) - High [464]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Dynamics 365 Business Central | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.8 | 10 | EPSS Probability is 0.0183, EPSS Percentile is 0.78475 |
140. Elevation of Privilege - Windows Client Side Caching driver (csc.sys) (CVE-2026-70149) - High [463]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56923 |
141. Elevation of Privilege - Windows Client-Side Caching (CSC) Service (CVE-2026-70068) - High [463]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56922 |
142. Elevation of Privilege - Windows Distributed File System (DFS) (CVE-2026-105723) - High [463]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66265 |
143. Elevation of Privilege - Windows Encrypting File System (EFS) (CVE-2026-83784) - High [463]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00954, EPSS Percentile is 0.60605 |
144. Elevation of Privilege - Windows OLE DB (CVE-2026-70210) - High [463]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56923 |
145. Remote Code Execution - .NET (CVE-2026-96224) - High [461]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | .NET | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53571 |
146. Remote Code Execution - .NET (CVE-2026-96235) - High [461]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | .NET | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.5357 |
147. Elevation of Privilege - Azure Arc (CVE-2026-96204) - High [458]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0.4 | 17 | The existence of a private exploit is mentioned on Microsoft:PrivateExploit:PoC website | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Azure Arc | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00755, EPSS Percentile is 0.54181 |
148. Remote Code Execution - Microsoft Excel (CVE-2026-105718) - High [457]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | MS Office product | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0082, EPSS Percentile is 0.56374 |
149. Remote Code Execution - Microsoft Internet Messaging API (CVE-2026-83778) - High [457]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Microsoft Internet Messaging API | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00805, EPSS Percentile is 0.55878 |
150. Remote Code Execution - Microsoft Office Visio (CVE-2026-102856) - High [457]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Microsoft Visio | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00798, EPSS Percentile is 0.55639 |
151. Remote Code Execution - Microsoft Office Visio (CVE-2026-102857) - High [457]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Microsoft Visio | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00798, EPSS Percentile is 0.55638 |
152. Remote Code Execution - Skype for Business (CVE-2026-70297) - High [457]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Skype for Business | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01024, EPSS Percentile is 0.6287 |
153. Elevation of Privilege - Windows Kernel (CVE-2026-70111) - High [456]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51102 |
ZDI: Windows Kernel and the Win32k Subsystem: Alright – don’t @me. I know the difference between kernel and Win32k components, but they’re similar enough that I group them together. There are 94 CVEs in the Windows Kernel and Win32K components: Windows Kernel (46), Win32 Kernel Subsystem (36), Win32K (8), Win32K GRFX (3) and Win32K ICOMP (1). By type, 71 are elevation of privilege, 20 are info disclosure, 2 are DoS and 1 is a security feature bypass. Most of these just lead to SYSTEM access as expected. Of the info disclosure bugs, these primarily leak random portions of memory. The only real outlier here is CVE-2026-70111, whose advisory says the attacker elevates privileges “over a network.” That’s unusual for a kernel EoP.
154. Remote Code Execution - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-88121) - High [454]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.0. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00488, EPSS Percentile is 0.40514 |
155. Remote Code Execution - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-88173) - High [454]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00517, EPSS Percentile is 0.42609 |
156. Remote Code Execution - Windows Bluetooth Service (CVE-2026-83739) - High [454]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00423, EPSS Percentile is 0.35102 |
157. Remote Code Execution - Windows DHCP Client (CVE-2026-70250) - High [454]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0042, EPSS Percentile is 0.34781 |
ZDI: Windows DHCP Client and Server: There are 18 CVEs in Windows DHCP: 16 in DHCP Server and 2 in DHCP Client. We’ve already discussed the wormable ones, so I won’t rehash them here. Of the remaining 12 DHCP bugs, two are Critical. CVE-2026-88171 is an unauthenticated double free in DHCP Server that just misses being wormable, and CVE-2026-70250 is a DHCP Client use-after-free that requires an adjacent network. The rest are a mix of authenticated RCEs, two unauthenticated DoS bugs, two EoPs and two security feature bypasses, none rated above “Exploitation Less Likely” by Microsoft.
158. Remote Code Execution - Windows DHCP Server (CVE-2026-85841) - High [454]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.6. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00645, EPSS Percentile is 0.49797 |
159. Remote Code Execution - Windows DHCP Server (CVE-2026-88117) - High [454]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0055, EPSS Percentile is 0.44775 |
160. Remote Code Execution - Windows Event Tracing (CVE-2026-83836) - High [454]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00444, EPSS Percentile is 0.37117 |
161. Remote Code Execution - Windows iSCSI (CVE-2026-70013) - High [454]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00534, EPSS Percentile is 0.43815 |
162. 
Information Disclosure - Windows DNS Server (CVE-2026-70244) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00942, EPSS Percentile is 0.6025 |
163. Remote Code Execution - Microsoft Office Outlook (CVE-2026-70242) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01031, EPSS Percentile is 0.63044 |
Rapid7: The sheer volume of vulnerabilities in recent Patch Tuesday releases can easily include several examples of potentially concerning vulnerabilities, each of which might have been more remarkable in its own right back when volumes were lower. Today, Microsoft has published five separate remote code execution vulnerabilities in Outlook where the preview pane is a vector, meaning that simply scrolling past an email in the Outlook reading pane would be sufficient to trigger exploitation. Worse still, Outlook might helpfully display the preview without any user interaction at all. All five of CVE-2026-70242, CVE-2026-97749, CVE-2026-97016, CVE-2026-88156, and CVE-2026-70291 receive fixes in the same patches. No-interaction Outlook preview pane vulnerabilities can sometimes feature prominently in state-backed actor campaigns, with CVE-2023-23397 as a prominent example in this category.
164. Remote Code Execution - Microsoft Office Outlook (CVE-2026-70291) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01031, EPSS Percentile is 0.63044 |
Rapid7: The sheer volume of vulnerabilities in recent Patch Tuesday releases can easily include several examples of potentially concerning vulnerabilities, each of which might have been more remarkable in its own right back when volumes were lower. Today, Microsoft has published five separate remote code execution vulnerabilities in Outlook where the preview pane is a vector, meaning that simply scrolling past an email in the Outlook reading pane would be sufficient to trigger exploitation. Worse still, Outlook might helpfully display the preview without any user interaction at all. All five of CVE-2026-70242, CVE-2026-97749, CVE-2026-97016, CVE-2026-88156, and CVE-2026-70291 receive fixes in the same patches. No-interaction Outlook preview pane vulnerabilities can sometimes feature prominently in state-backed actor campaigns, with CVE-2023-23397 as a prominent example in this category.
165. Remote Code Execution - Microsoft Office Outlook (CVE-2026-88156) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00998, EPSS Percentile is 0.62038 |
Rapid7: The sheer volume of vulnerabilities in recent Patch Tuesday releases can easily include several examples of potentially concerning vulnerabilities, each of which might have been more remarkable in its own right back when volumes were lower. Today, Microsoft has published five separate remote code execution vulnerabilities in Outlook where the preview pane is a vector, meaning that simply scrolling past an email in the Outlook reading pane would be sufficient to trigger exploitation. Worse still, Outlook might helpfully display the preview without any user interaction at all. All five of CVE-2026-70242, CVE-2026-97749, CVE-2026-97016, CVE-2026-88156, and CVE-2026-70291 receive fixes in the same patches. No-interaction Outlook preview pane vulnerabilities can sometimes feature prominently in state-backed actor campaigns, with CVE-2023-23397 as a prominent example in this category.
166. Remote Code Execution - Microsoft Office Outlook (CVE-2026-97016) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00998, EPSS Percentile is 0.62037 |
Rapid7: The sheer volume of vulnerabilities in recent Patch Tuesday releases can easily include several examples of potentially concerning vulnerabilities, each of which might have been more remarkable in its own right back when volumes were lower. Today, Microsoft has published five separate remote code execution vulnerabilities in Outlook where the preview pane is a vector, meaning that simply scrolling past an email in the Outlook reading pane would be sufficient to trigger exploitation. Worse still, Outlook might helpfully display the preview without any user interaction at all. All five of CVE-2026-70242, CVE-2026-97749, CVE-2026-97016, CVE-2026-88156, and CVE-2026-70291 receive fixes in the same patches. No-interaction Outlook preview pane vulnerabilities can sometimes feature prominently in state-backed actor campaigns, with CVE-2023-23397 as a prominent example in this category.
167. Remote Code Execution - Microsoft Office Outlook (CVE-2026-97749) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00998, EPSS Percentile is 0.62037 |
Rapid7: The sheer volume of vulnerabilities in recent Patch Tuesday releases can easily include several examples of potentially concerning vulnerabilities, each of which might have been more remarkable in its own right back when volumes were lower. Today, Microsoft has published five separate remote code execution vulnerabilities in Outlook where the preview pane is a vector, meaning that simply scrolling past an email in the Outlook reading pane would be sufficient to trigger exploitation. Worse still, Outlook might helpfully display the preview without any user interaction at all. All five of CVE-2026-70242, CVE-2026-97749, CVE-2026-97016, CVE-2026-88156, and CVE-2026-70291 receive fixes in the same patches. No-interaction Outlook preview pane vulnerabilities can sometimes feature prominently in state-backed actor campaigns, with CVE-2023-23397 as a prominent example in this category.
168. Remote Code Execution - Microsoft Office PowerPoint (CVE-2026-88178) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00966, EPSS Percentile is 0.60979 |
169. Remote Code Execution - Microsoft Office SharePoint (CVE-2026-85900) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01519, EPSS Percentile is 0.74096 |
ZDI: SharePoint Server: Besides the Critical bug already mentioned, SharePoint has 34 other CVEs this month: 13 EoP, seven spoofing, seven RCE, six info disclosure and one tampering bug. All of the rest are Important. The seven RCEs all lean on authentication, but the bar is low. CVE-2026-85900 needs only Site Member permissions, and CVE-2026-88155, 88163 and 88166 need Manage List. CVE-2026-105013 and 70267 don’t say what level an attacker needs, so assume these default permissions only. The bug classes read more like a web-app pentest report than memory corruption: seven of the EoPs are authorization and access-control failures, three more are SSRF, and the spoofing bugs are mostly stored script. The one other unauthenticated bug is CVE-2026-97783, a spoofing flaw at CVSS 8.1. Given SharePoint’s recent history of “Exploitation Less Likely” turning into “in the wild,” don’t skip the RCEs just because they need credentials.
170. Remote Code Execution - Microsoft Office Word (CVE-2026-70300) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00976, EPSS Percentile is 0.61391 |
171. Remote Code Execution - Microsoft PostScript Printer Driver (CVE-2026-70147) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft PostScript Printer Driver | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00966, EPSS Percentile is 0.60979 |
172. Remote Code Execution - Microsoft PostScript Printer Driver (CVE-2026-70153) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft PostScript Printer Driver | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00966, EPSS Percentile is 0.60979 |
173. Remote Code Execution - Microsoft QUIC (CVE-2026-100219) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft QUIC | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00997, EPSS Percentile is 0.62018 |
174. Remote Code Execution - Microsoft QUIC (CVE-2026-105016) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft QUIC | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00986, EPSS Percentile is 0.61669 |
175. Remote Code Execution - Network Policy Server (NPS) (CVE-2026-100222) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Network Policy Server (NPS) | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00958, EPSS Percentile is 0.60711 |
176. Remote Code Execution - Network Policy Server (NPS) (CVE-2026-85806) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Network Policy Server (NPS) | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00928, EPSS Percentile is 0.59785 |
177. Remote Code Execution - RPC Runtime Library (CVE-2026-83910) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | RPC Runtime Library | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00958, EPSS Percentile is 0.60712 |
178. Remote Code Execution - Remote Access Point-to-Point Protocol (PPP) EAP-TLS (CVE-2026-84015) - High [452]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Remote Access Point-to-Point Protocol (PPP) EAP-TLS | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58654 |
179. Elevation of Privilege - .NET Framework (CVE-2026-85363) - High [451]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | .NET Framework | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53573 |
180. Elevation of Privilege - Microsoft Exchange (CVE-2026-77910) - High [451]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00765, EPSS Percentile is 0.54503 |
181. Elevation of Privilege - Windows Error Reporting Service (CVE-2026-97798) - High [451]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00832, EPSS Percentile is 0.56764 |
182. Elevation of Privilege - Windows NDIS (CVE-2026-105007) - High [451]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00767, EPSS Percentile is 0.54596 |
183. Elevation of Privilege - Windows Partition Management Driver (CVE-2026-83851) - High [451]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00607, EPSS Percentile is 0.47898 |
184. Elevation of Privilege - Windows Update (CVE-2026-69718) - High [451]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00963, EPSS Percentile is 0.60923 |
185. Remote Code Execution - .NET (CVE-2026-70197) - High [449]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00695, EPSS Percentile is 0.51972 |
186. Information Disclosure - Windows Encrypting File System (EFS) (CVE-2026-83683) - High [448]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01134, EPSS Percentile is 0.65855 |
187. Information Disclosure - Windows Message Queuing Queue Manager (CVE-2026-85334) - High [448]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01005, EPSS Percentile is 0.62263 |
188. Information Disclosure - Windows Print Spooler Components (CVE-2026-85353) - High [448]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01005, EPSS Percentile is 0.62263 |
189. Information Disclosure - Windows Routing and Remote Access Service (RRAS) (CVE-2026-85322) - High [448]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01049, EPSS Percentile is 0.63588 |
190. Information Disclosure - Windows Routing and Remote Access Service (RRAS) (CVE-2026-96245) - High [448]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01005, EPSS Percentile is 0.62263 |
191. Security Feature Bypass - .NET Framework (CVE-2026-108398) - High [448]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | .NET Framework | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00475, EPSS Percentile is 0.39545 |
Qualys: CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability An untrusted search path flaw in the .NET Framework may allow an authenticated attacker to bypass a security feature locally.
Tenable: CVE-2026-108398 |.NET Framework security feature bypass vulnerability
Tenable: CVE-2026-108398 is a security feature bypass vulnerability affecting.NET Framework. It received a CVSSv3 score of 8.8 and is rated as important. It was publicly disclosed prior to a patch being available.
Rapid7: Microsoft is aware of some level of public disclosure of CVE-2026-108398, a .NET Framework security feature bypass. Exploitation requires an attacker with an existing foothold to register a malicious .NET assembly for loading by a protected process, bypassing Windows Defender Application Control (WDAC) enforcement. Microsoft rebranded WDAC as App Control for Business several years ago, so you may know it under its new name. The Microsoft Learn page for Application Control for Windows points out that “your organization's data is one of its most valuable assets... and threat actors want it”, and this is, of course, correct. The patch presumably removes an attacker-controlled location from the list of places .NET Framework searches for registered assemblies, which are typically contained within DLLs and executables. If any further indications were needed that vulnerability volumes are increasing industry-wide, this is only the second month that Microsoft has published vulnerabilities with six-digit CVE numbers, but these extra-large CVEs will seem unremarkable from now on.
ZDI: Two bugs in this release are listed as publicly known: CVE-2026-108398, a .NET Framework security feature bypass that could let an attacker evade Windows Defender Application Control (WDAC) enforcement, and CVE-2026-92707, a denial-of-service bug in MessagePack-CSharp that was released by a third party and is now included in Microsoft’s release. Neither is listed as under active attack. As always, we’ll start with the bug under active attack and move on from there.
192. Remote Code Execution - Microsoft Office Visio (CVE-2026-102855) - High [445]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Microsoft Visio | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00601, EPSS Percentile is 0.47615 |
193. Remote Code Execution - Windows Bluetooth (CVE-2026-70126) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.1. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00469, EPSS Percentile is 0.39108 |
194. Remote Code Execution - Windows DHCP Server (CVE-2026-69830) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0035, EPSS Percentile is 0.2699 |
195. Remote Code Execution - Windows Deployment Services (CVE-2026-88174) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00422, EPSS Percentile is 0.34994 |
196. Remote Code Execution - Windows Network File System (CVE-2026-70143) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.2599 |
197. Remote Code Execution - Windows Overlay Filter (CVE-2026-69942) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25979 |
198. Remote Code Execution - Windows Overlay Filter (CVE-2026-69947) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00448, EPSS Percentile is 0.37406 |
199. Remote Code Execution - Windows Overlay Filter (CVE-2026-69958) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00448, EPSS Percentile is 0.37406 |
200. Remote Code Execution - Windows Overlay Filter (CVE-2026-69959) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25977 |
201. Remote Code Execution - Windows Reliable Multicast Transport Driver (RMCAST) (CVE-2026-69789) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00416, EPSS Percentile is 0.34405 |
202. Remote Code Execution - Windows Spaceport.sys (CVE-2026-70112) - High [442]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25988 |
203. Remote Code Execution - Microsoft Failover Cluster (CVE-2026-88102) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Failover Cluster | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00648, EPSS Percentile is 0.49929 |
204. Remote Code Execution - Microsoft Failover Cluster Virtual Driver (CVE-2026-96864) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Failover Cluster Virtual Driver | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00648, EPSS Percentile is 0.4993 |
205. Remote Code Execution - Microsoft Office Excel (CVE-2026-100209) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00821, EPSS Percentile is 0.56408 |
ZDI: Office-Related Bugs: I’ve already mentioned a couple of these above, but that still leaves a lot to cover. Counting Skype for Business and Bookings, there are 139 Office-related CVEs (including those mentioned above): 100 RCE, 29 info disclosure, nine EoP and one security feature bypass. Thirty-five are Critical and 104 are Important. I would focus on Outlook, with five Critical RCEs at CVSS 9.8. All five say simply viewing the email in the Reading Pane triggers the bug, with no click and no authentication. That makes them the closest thing to wormable in Office. Then there are the 69 Excel bugs; 51 RCEs and 18 info leaks. Nineteen of these RCEs are Critical at 8.8 (for example CVE-2026-100209). Most of these are the open-and-own variety. Four Excel bugs do list the Preview Pane: CVE-2026-70254 and 88145 (RCE, 8.8), and 88154 and 88175 (info leaks). Word adds 22 more. Most of the RCEs and info leaks name the Preview Pane as a vector. The rest are an EoP and a security feature bypass. There are 12 Access RCEs and three Critical Visio RCEs that are open-and-own. Access also has one info. PowerPoint rounds things out with three Critical RCEs, all of which name the Preview Pane. The other four are info leaks.
206. Remote Code Execution - Microsoft Office Excel (CVE-2026-100210) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00821, EPSS Percentile is 0.56408 |
207. Remote Code Execution - Microsoft Office Excel (CVE-2026-100211) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00821, EPSS Percentile is 0.56408 |
208. Remote Code Execution - Microsoft Office Excel (CVE-2026-100212) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00788, EPSS Percentile is 0.55271 |
209. Remote Code Execution - Microsoft Office Excel (CVE-2026-70254) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00788, EPSS Percentile is 0.5527 |
ZDI: Office-Related Bugs: I’ve already mentioned a couple of these above, but that still leaves a lot to cover. Counting Skype for Business and Bookings, there are 139 Office-related CVEs (including those mentioned above): 100 RCE, 29 info disclosure, nine EoP and one security feature bypass. Thirty-five are Critical and 104 are Important. I would focus on Outlook, with five Critical RCEs at CVSS 9.8. All five say simply viewing the email in the Reading Pane triggers the bug, with no click and no authentication. That makes them the closest thing to wormable in Office. Then there are the 69 Excel bugs; 51 RCEs and 18 info leaks. Nineteen of these RCEs are Critical at 8.8 (for example CVE-2026-100209). Most of these are the open-and-own variety. Four Excel bugs do list the Preview Pane: CVE-2026-70254 and 88145 (RCE, 8.8), and 88154 and 88175 (info leaks). Word adds 22 more. Most of the RCEs and info leaks name the Preview Pane as a vector. The rest are an EoP and a security feature bypass. There are 12 Access RCEs and three Critical Visio RCEs that are open-and-own. Access also has one info. PowerPoint rounds things out with three Critical RCEs, all of which name the Preview Pane. The other four are info leaks.
210. Remote Code Execution - Microsoft Office Excel (CVE-2026-77902) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00788, EPSS Percentile is 0.55271 |
211. Remote Code Execution - Microsoft Office Excel (CVE-2026-97739) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55043 |
212. Remote Code Execution - Microsoft Office Excel (CVE-2026-97741) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55043 |
213. Remote Code Execution - Microsoft Office Excel (CVE-2026-97742) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55043 |
214. Remote Code Execution - Microsoft Office Excel (CVE-2026-97745) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55043 |
215. Remote Code Execution - Microsoft Office Excel (CVE-2026-97753) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55042 |
216. Remote Code Execution - Microsoft Office Excel (CVE-2026-97755) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55045 |
217. Remote Code Execution - Microsoft Office Excel (CVE-2026-97756) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55044 |
218. Remote Code Execution - Microsoft Office Excel (CVE-2026-97759) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55044 |
219. Remote Code Execution - Microsoft Office Excel (CVE-2026-97761) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55044 |
220. Remote Code Execution - Microsoft Office Excel (CVE-2026-97765) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55044 |
221. Remote Code Execution - Microsoft Office Excel (CVE-2026-97776) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55045 |
222. Remote Code Execution - Microsoft Office Excel (CVE-2026-97780) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00781, EPSS Percentile is 0.55042 |
223. Remote Code Execution - Microsoft Office Outlook (CVE-2026-70256) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00805, EPSS Percentile is 0.55878 |
224. Remote Code Execution - Microsoft Office Outlook (CVE-2026-70257) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00805, EPSS Percentile is 0.55877 |
225. Remote Code Execution - Microsoft Office Outlook (CVE-2026-70282) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00805, EPSS Percentile is 0.55879 |
226. Remote Code Execution - Microsoft Office PowerPoint (CVE-2026-70215) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00798, EPSS Percentile is 0.55637 |
227. Remote Code Execution - Microsoft Office PowerPoint (CVE-2026-88144) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00798, EPSS Percentile is 0.55639 |
228. Remote Code Execution - Microsoft Office SharePoint (CVE-2026-69943) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00809, EPSS Percentile is 0.56029 |
229. Remote Code Execution - Microsoft Office SharePoint (CVE-2026-88155) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00819, EPSS Percentile is 0.56322 |
ZDI: SharePoint Server: Besides the Critical bug already mentioned, SharePoint has 34 other CVEs this month: 13 EoP, seven spoofing, seven RCE, six info disclosure and one tampering bug. All of the rest are Important. The seven RCEs all lean on authentication, but the bar is low. CVE-2026-85900 needs only Site Member permissions, and CVE-2026-88155, 88163 and 88166 need Manage List. CVE-2026-105013 and 70267 don’t say what level an attacker needs, so assume these default permissions only. The bug classes read more like a web-app pentest report than memory corruption: seven of the EoPs are authorization and access-control failures, three more are SSRF, and the spoofing bugs are mostly stored script. The one other unauthenticated bug is CVE-2026-97783, a spoofing flaw at CVSS 8.1. Given SharePoint’s recent history of “Exploitation Less Likely” turning into “in the wild,” don’t skip the RCEs just because they need credentials.
230. Remote Code Execution - Microsoft Office SharePoint (CVE-2026-88163) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00819, EPSS Percentile is 0.56322 |
231. Remote Code Execution - Microsoft Office SharePoint (CVE-2026-88166) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00819, EPSS Percentile is 0.56323 |
232. Remote Code Execution - Microsoft Office Word (CVE-2026-70268) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00788, EPSS Percentile is 0.5527 |
233. Remote Code Execution - Microsoft Office Word (CVE-2026-70287) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00788, EPSS Percentile is 0.5527 |
234. Remote Code Execution - Microsoft Office Word (CVE-2026-70301) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00788, EPSS Percentile is 0.55271 |
235. Remote Code Execution - Microsoft Office Word (CVE-2026-70302) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00788, EPSS Percentile is 0.55271 |
236. Remote Code Execution - Microsoft PostScript Printer Driver (CVE-2026-108467) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft PostScript Printer Driver | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00886, EPSS Percentile is 0.58457 |
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
237. Remote Code Execution - Microsoft SQL Server (CVE-2026-65674) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00875, EPSS Percentile is 0.58143 |
ZDI: - CVE-2026-65674 – Microsoft SQL Server Remote Code Execution Vulnerability. Like SharePoint, there’s lots to choose from in the SQL component. This one is the highest-scoring CVSS at 8.8 and has the best exploitability rating of any SQL Server bug this month. It’s a deserialization of untrusted data. An authenticated attacker connects to an affected SQL Server and sends a specially crafted request to run code on the server. No user interaction is needed. Definitely check this on any SQL Server directly connected to the internet.
238. Remote Code Execution - Microsoft XML (CVE-2026-83935) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft XML | |
| 1.0 | 10 | CVSS Base Score is 9.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00695, EPSS Percentile is 0.51964 |
239. Remote Code Execution - Visual Studio Tools for Applications and SQL Server Management Studio (CVE-2026-103572) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Visual Studio Tools for Applications and SQL Server Management Studio | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00822, EPSS Percentile is 0.56434 |
ZDI: SQL Server and Client: Beyond the RCE already mentioned, SQL Server and its client tools have 23 other CVEs this month: nine RCE, seven EoP, four info disclosure, and three DoS. All are Important. The pattern here is authenticated memory corruption: heap and stack overflows, use-after-frees, and out-of-bounds reads. The template is simple: log in, submit a crafted request, corrupt memory, run code on the server. That’s why the CVSS 8.8 bugs here are less scary than they score; an attacker already needs database credentials, but it’s also textbook post-compromise lateral movement. The odd one out is CVE-2026-103572, which isn’t a database bug at all. It’s in SQL Server Management Studio, where a prompt injection through Copilot can turn into code execution. As AI features creep (sneak?) into admin tools, I expect to see more of this.
240. Remote Code Execution - Web Distributed Authoring and Versioning (WEBDAV) (CVE-2026-88136) - High [440]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Web Distributed Authoring and Versioning (WEBDAV) | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00954, EPSS Percentile is 0.60605 |
241. Elevation of Privilege - ASP.NET Core (CVE-2026-70175) - High [439]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00643, EPSS Percentile is 0.49697 |
242. Elevation of Privilege - ASP.NET Core (CVE-2026-70179) - High [439]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00555, EPSS Percentile is 0.45054 |
243. Elevation of Privilege - Windows Assigned Access (CVE-2026-96220) - High [439]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00745, EPSS Percentile is 0.53814 |
244. Elevation of Privilege - Windows Bluetooth Service (CVE-2026-83777) - High [439]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00547, EPSS Percentile is 0.44549 |
245. Elevation of Privilege - Windows CD-ROM Driver (CVE-2026-83888) - High [439]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00887, EPSS Percentile is 0.58492 |
246. Elevation of Privilege - Windows Camera Frame Server Monitor (CVE-2026-83771) - High [439]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00547, EPSS Percentile is 0.44549 |
247. Elevation of Privilege - Windows Error Reporting (CVE-2026-69363) - High [439]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.0. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00609, EPSS Percentile is 0.47993 |
248. Elevation of Privilege - Windows Performance Monitor (CVE-2026-85359) - High [439]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00745, EPSS Percentile is 0.53814 |
249. Remote Code Execution - .NET (CVE-2026-96237) - High [438]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00548, EPSS Percentile is 0.4461 |
250. 
Denial of Service - Microsoft OpenSSH for Windows (CVE-2026-70163) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01105, EPSS Percentile is 0.65168 |
251. Denial of Service - Windows Active Directory Domain Services (CVE-2026-83647) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01146, EPSS Percentile is 0.66171 |
252. Denial of Service - Windows DHCP Server (CVE-2026-83665) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.012, EPSS Percentile is 0.67627 |
253. Denial of Service - Windows DNS (CVE-2026-70079) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66264 |
254. Denial of Service - Windows DNS (CVE-2026-70082) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.012, EPSS Percentile is 0.67626 |
255. Denial of Service - Windows DNS (CVE-2026-70155) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.012, EPSS Percentile is 0.67627 |
256. Denial of Service - Windows Failover Cluster (CVE-2026-102192) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66267 |
257. Denial of Service - Windows GDI (CVE-2026-83860) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66266 |
258. Denial of Service - Windows Host Guardian Service (CVE-2026-96248) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66265 |
259. Denial of Service - Windows Internet Key Exchange (IKE) Extension (CVE-2026-83795) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66266 |
260. Denial of Service - Windows Internet Key Exchange (IKE) Extension (CVE-2026-83843) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66266 |
261. Denial of Service - Windows Local Security Authority Subsystem Service (LSASS) (CVE-2026-83516) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.012, EPSS Percentile is 0.67627 |
262. Denial of Service - Windows Remote Desktop Gateway (RD Gateway) (CVE-2026-70033) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66265 |
ZDI: Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs.
263. Denial of Service - Windows Routing and Remote Access Service (RRAS) (CVE-2026-84017) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66266 |
264. Denial of Service - Windows Routing and Remote Access Service (RRAS) (CVE-2026-85808) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66267 |
265. Denial of Service - Windows SMB Server (CVE-2026-70133) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66264 |
266. Denial of Service - Windows Storage Spaces Controller (CVE-2026-87716) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66267 |
267. Denial of Service - Windows WLAN Service (CVE-2026-83855) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.012, EPSS Percentile is 0.67627 |
268. Denial of Service - Windows iSCSI (CVE-2026-70031) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66265 |
269. Information Disclosure - Windows Client for NFS (CVE-2026-69940) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00942, EPSS Percentile is 0.60249 |
270. Information Disclosure - Windows Client for NFS (CVE-2026-69955) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00887, EPSS Percentile is 0.58493 |
271. Information Disclosure - Windows Device Association Service (CVE-2026-85331) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60555 |
272. Information Disclosure - Windows Event Viewer (CVE-2026-85840) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60556 |
273. Information Disclosure - Windows GDI (CVE-2026-83651) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00942, EPSS Percentile is 0.60249 |
274. Information Disclosure - Windows GDI (CVE-2026-85797) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00931, EPSS Percentile is 0.59859 |
275. Information Disclosure - Windows Remote Desktop Client (CVE-2026-85337) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Remote Desktop Protocol Client | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00887, EPSS Percentile is 0.58492 |
276. Information Disclosure - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-85821) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60555 |
277. Security Feature Bypass - Microsoft PowerShell (CVE-2026-85805) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00606, EPSS Percentile is 0.47838 |
278. Security Feature Bypass - Microsoft PowerShell (CVE-2026-96303) - High [436]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00606, EPSS Percentile is 0.47838 |
279. Elevation of Privilege - .NET and Visual Studio (CVE-2026-102869) - High [435]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | .NET and Visual Studio | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53572 |
280. Elevation of Privilege - Windows Kernel (CVE-2026-69898) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25983 |
281. Elevation of Privilege - Windows Kernel (CVE-2026-70106) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30493 |
282. Elevation of Privilege - Windows Kernel (CVE-2026-70114) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25988 |
283. Elevation of Privilege - Windows Kernel (CVE-2026-70121) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25986 |
284. Elevation of Privilege - Windows Kernel (CVE-2026-70303) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30491 |
285. Elevation of Privilege - Windows Kernel (CVE-2026-83690) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25986 |
286. Elevation of Privilege - Windows Kernel (CVE-2026-83735) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30491 |
287. Elevation of Privilege - Windows Kernel (CVE-2026-83768) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27644 |
288. Elevation of Privilege - Windows Kernel (CVE-2026-83882) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.2598 |
289. Elevation of Privilege - Windows Kernel (CVE-2026-83913) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.2598 |
290. Elevation of Privilege - Windows Kernel (CVE-2026-85850) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00344, EPSS Percentile is 0.26295 |
291. Elevation of Privilege - Windows Kernel (CVE-2026-85945) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29189 |
292. Elevation of Privilege - Windows Kernel (CVE-2026-96913) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00331, EPSS Percentile is 0.2464 |
293. Elevation of Privilege - Windows Kernel (CVE-2026-96929) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29189 |
294. Elevation of Privilege - Windows Win32k (CVE-2026-70060) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30492 |
295. Elevation of Privilege - Windows Win32k (CVE-2026-70104) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30492 |
296. Elevation of Privilege - Windows Win32k (CVE-2026-70108) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30492 |
297. Elevation of Privilege - Windows Win32k (CVE-2026-70117) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27643 |
298. Elevation of Privilege - Windows Win32k (CVE-2026-70285) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25981 |
299. Elevation of Privilege - Windows Win32k (CVE-2026-83732) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00344, EPSS Percentile is 0.26296 |
300. Elevation of Privilege - Windows Win32k (CVE-2026-83883) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25977 |
301. Security Feature Bypass - .NET (CVE-2026-96957) - High [432]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.7 | 14 | .NET | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00459, EPSS Percentile is 0.38273 |
302. Information Disclosure - Windows IKE Extension (CVE-2026-103569) - High [431]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.7 | 14 | Internet Key Exchange (IKE, sometimes IKEv1 or IKEv2, depending on version) is the protocol used to set up a security association (SA) in the IPsec protocol suite | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01005, EPSS Percentile is 0.62263 |
303. Remote Code Execution - Microsoft PowerShell (CVE-2026-70052) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00328, EPSS Percentile is 0.24298 |
304. Remote Code Execution - Windows Bluetooth (CVE-2026-87713) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00281, EPSS Percentile is 0.19195 |
305. Remote Code Execution - Windows Error Reporting (CVE-2026-83758) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23132 |
306. Remote Code Execution - Windows Message Queuing Queue Manager (CVE-2026-85874) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23155 |
307. Remote Code Execution - Windows NTFS (CVE-2026-69902) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.7 | 10 | CVSS Base Score is 6.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00356, EPSS Percentile is 0.27706 |
308. Remote Code Execution - Windows NTFS (CVE-2026-83640) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2314 |
309. Remote Code Execution - Windows NTFS (CVE-2026-83712) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23139 |
310. Remote Code Execution - Windows NTFS (CVE-2026-96867) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23147 |
311. Remote Code Execution - Windows Resilient File System (ReFS) (CVE-2026-102227) - High [430]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23133 |
312. Denial of Service - Windows Kernel (CVE-2026-70170) - High [429]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01089, EPSS Percentile is 0.64725 |
313. Remote Code Execution - Graphic Fonts (CVE-2026-69326) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Graphic Fonts | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00639, EPSS Percentile is 0.49479 |
314. Remote Code Execution - Microsoft Office Access (CVE-2026-102849) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00639, EPSS Percentile is 0.49479 |
315. Remote Code Execution - Microsoft Office Access (CVE-2026-102850) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00639, EPSS Percentile is 0.49478 |
316. Remote Code Execution - Microsoft Office Access (CVE-2026-105591) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53572 |
317. Remote Code Execution - Microsoft Office Access (CVE-2026-105593) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53571 |
318. Remote Code Execution - Microsoft Office Access (CVE-2026-105595) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53572 |
319. Remote Code Execution - Microsoft Office Access (CVE-2026-105596) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53569 |
320. Remote Code Execution - Microsoft Office Access (CVE-2026-105597) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53573 |
321. Remote Code Execution - Microsoft Office Access (CVE-2026-105598) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.5357 |
322. Remote Code Execution - Microsoft Office Access (CVE-2026-105716) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.5357 |
323. Remote Code Execution - Microsoft Office Access (CVE-2026-105717) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00774, EPSS Percentile is 0.5482 |
324. Remote Code Execution - Microsoft Office Excel (CVE-2026-88145) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52997 |
325. Remote Code Execution - Microsoft Office Excel (CVE-2026-97003) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53 |
326. Remote Code Execution - Microsoft Office Excel (CVE-2026-97004) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53 |
327. Remote Code Execution - Microsoft Office Excel (CVE-2026-97007) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53 |
328. Remote Code Execution - Microsoft Office Excel (CVE-2026-97008) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53 |
329. Remote Code Execution - Microsoft Office Excel (CVE-2026-97010) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53001 |
330. Remote Code Execution - Microsoft Office Excel (CVE-2026-97011) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53001 |
331. Remote Code Execution - Microsoft Office Excel (CVE-2026-97017) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53004 |
332. Remote Code Execution - Microsoft Office Excel (CVE-2026-97738) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52999 |
333. Remote Code Execution - Microsoft Office Excel (CVE-2026-97746) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52997 |
334. Remote Code Execution - Microsoft Office Excel (CVE-2026-97747) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52998 |
335. Remote Code Execution - Microsoft Office Excel (CVE-2026-97748) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52997 |
336. Remote Code Execution - Microsoft Office Excel (CVE-2026-97750) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52997 |
337. Remote Code Execution - Microsoft Office Excel (CVE-2026-97752) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53002 |
338. Remote Code Execution - Microsoft Office Excel (CVE-2026-97754) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53002 |
339. Remote Code Execution - Microsoft Office Excel (CVE-2026-97757) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52998 |
340. Remote Code Execution - Microsoft Office Excel (CVE-2026-97758) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00589, EPSS Percentile is 0.46953 |
341. Remote Code Execution - Microsoft Office Excel (CVE-2026-97762) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52999 |
342. Remote Code Execution - Microsoft Office Excel (CVE-2026-97763) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52999 |
343. Remote Code Execution - Microsoft Office Excel (CVE-2026-97766) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53004 |
344. Remote Code Execution - Microsoft Office Excel (CVE-2026-97767) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00589, EPSS Percentile is 0.46953 |
345. Remote Code Execution - Microsoft Office Excel (CVE-2026-97768) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53003 |
346. Remote Code Execution - Microsoft Office Excel (CVE-2026-97769) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00757, EPSS Percentile is 0.54251 |
347. Remote Code Execution - Microsoft Office Excel (CVE-2026-97770) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53003 |
348. Remote Code Execution - Microsoft Office Excel (CVE-2026-97771) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53003 |
349. Remote Code Execution - Microsoft Office Excel (CVE-2026-97772) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53003 |
350. Remote Code Execution - Microsoft Office Excel (CVE-2026-97773) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53001 |
351. Remote Code Execution - Microsoft Office Excel (CVE-2026-97775) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53001 |
352. Remote Code Execution - Microsoft Office Excel (CVE-2026-97777) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.53002 |
353. Remote Code Execution - Microsoft Office Excel (CVE-2026-97778) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00589, EPSS Percentile is 0.46952 |
354. Remote Code Execution - Microsoft Office OneNote (CVE-2026-102858) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office OneNote | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53571 |
355. Remote Code Execution - Microsoft Office OneNote (CVE-2026-97781) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office OneNote | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00778, EPSS Percentile is 0.5492 |
356. Remote Code Execution - Microsoft Office Outlook (CVE-2026-97012) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00738, EPSS Percentile is 0.53571 |
357. Remote Code Execution - Microsoft Office Word (CVE-2026-83891) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00757, EPSS Percentile is 0.54251 |
358. Remote Code Execution - Microsoft Office Word (CVE-2026-88150) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52998 |
359. Remote Code Execution - Microsoft Office Word (CVE-2026-88186) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52999 |
360. Remote Code Execution - Microsoft Office Word (CVE-2026-88202) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00722, EPSS Percentile is 0.52998 |
361. Remote Code Execution - RPC Runtime (CVE-2026-102203) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | RPC Runtime | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00767, EPSS Percentile is 0.54597 |
362. Remote Code Execution - RPC Runtime Library (CVE-2026-88219) - High [428]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | RPC Runtime Library | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00767, EPSS Percentile is 0.54597 |
363. Elevation of Privilege - ASP.NET Core (CVE-2026-70183) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00456, EPSS Percentile is 0.38044 |
364. Elevation of Privilege - Microsoft Bluetooth Driver (CVE-2026-96844) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Microsoft Bluetooth Driver | |
| 0.8 | 10 | CVSS Base Score is 8.0. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00469, EPSS Percentile is 0.39085 |
365. Elevation of Privilege - Microsoft Windows Media Foundation (CVE-2026-70131) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00444, EPSS Percentile is 0.37118 |
366. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-83704) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00424, EPSS Percentile is 0.35139 |
367. Elevation of Privilege - Windows Bluetooth A2DP driver (CVE-2026-83838) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.0. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00488, EPSS Percentile is 0.40514 |
368. Elevation of Privilege - Windows Core Messaging (CVE-2026-69918) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00357, EPSS Percentile is 0.27861 |
369. Elevation of Privilege - Windows Enterprise App Management (CVE-2026-69452) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00583, EPSS Percentile is 0.46648 |
370. Elevation of Privilege - Windows Update (CVE-2026-69673) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00457, EPSS Percentile is 0.38154 |
371. Elevation of Privilege - Windows Update (CVE-2026-69733) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00439, EPSS Percentile is 0.3666 |
372. Elevation of Privilege - Windows Update (CVE-2026-69783) - High [427]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00439, EPSS Percentile is 0.3666 |
373. Denial of Service - ASP.NET Core (CVE-2026-70159) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01056, EPSS Percentile is 0.63781 |
374. Denial of Service - ASP.NET Core (CVE-2026-70181) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01056, EPSS Percentile is 0.63781 |
375. Denial of Service - ASP.NET Core (CVE-2026-70186) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00846, EPSS Percentile is 0.57211 |
376. Denial of Service - ASP.NET Core (CVE-2026-96236) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01056, EPSS Percentile is 0.63782 |
377. Denial of Service - Windows DHCP Client (CVE-2026-83677) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00871, EPSS Percentile is 0.58031 |
378. Denial of Service - Windows DNS (CVE-2026-70166) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01137, EPSS Percentile is 0.6596 |
379. Denial of Service - Windows Failover Cluster (CVE-2026-96945) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00834, EPSS Percentile is 0.56813 |
380. Denial of Service - Windows Internet Information Services (CVE-2026-97830) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00868, EPSS Percentile is 0.57942 |
381. Denial of Service - Windows Internet Key Exchange (IKE) Extension (CVE-2026-83685) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01137, EPSS Percentile is 0.6596 |
382. Denial of Service - Windows Routing and Remote Access Service (RRAS) (CVE-2026-103558) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00882, EPSS Percentile is 0.58345 |
383. Denial of Service - Windows SMB Server (CVE-2026-96325) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00834, EPSS Percentile is 0.56812 |
384. Elevation of Privilege - WebDAV (CVE-2026-102217) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01114, EPSS Percentile is 0.65396 |
385. Security Feature Bypass - .NET Framework (CVE-2026-70194) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | .NET Framework | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00429, EPSS Percentile is 0.35595 |
386. Security Feature Bypass - Microsoft PowerShell (CVE-2026-70185) - High [425]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00273, EPSS Percentile is 0.18353 |
387. Information Disclosure - Windows Print Spooler Components (CVE-2026-85847) - High [424]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00666, EPSS Percentile is 0.50745 |
388. Remote Code Execution - Microsoft MPEG-2 Video Extension (CVE-2026-70343) - High [423]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.4 | 14 | This extension helps video apps installed on Windows 10, such as Microsoft Movies & TV, to play MPEG-1 and MPEG-2 videos. | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00805, EPSS Percentile is 0.55878 |
389. Denial of Service - .NET (CVE-2026-58280) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01103, EPSS Percentile is 0.65102 |
390. Denial of Service - .NET (CVE-2026-69651) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01103, EPSS Percentile is 0.65102 |
391. Elevation of Privilege - Windows Kernel (CVE-2026-103578) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00417, EPSS Percentile is 0.34478 |
392. Elevation of Privilege - Windows Kernel (CVE-2026-83796) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23131 |
393. Elevation of Privilege - Windows Kernel (CVE-2026-83833) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23128 |
394. Elevation of Privilege - Windows Kernel (CVE-2026-83918) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00263, EPSS Percentile is 0.16927 |
395. Elevation of Privilege - Windows Kernel (CVE-2026-85836) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23142 |
396. Elevation of Privilege - Windows Kernel (CVE-2026-85837) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23142 |
397. Elevation of Privilege - Windows Kernel (CVE-2026-88134) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2315 |
398. Elevation of Privilege - Windows Kernel (CVE-2026-96312) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23125 |
399. Elevation of Privilege - Windows Kernel (CVE-2026-96317) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15495 |
400. Elevation of Privilege - Windows Kernel (CVE-2026-97803) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23142 |
401. Elevation of Privilege - Windows NTLM (CVE-2026-83709) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | A suite of security protocols to authenticate users' identity and protect the integrity and confidentiality of their activity | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23139 |
402. Elevation of Privilege - Windows TCP/IP (CVE-2026-83678) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23143 |
403. Elevation of Privilege - Windows TCP/IP (CVE-2026-85368) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23136 |
404. Elevation of Privilege - Windows Win32k (CVE-2026-83721) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23133 |
405. Elevation of Privilege - Windows Win32k (CVE-2026-83757) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23134 |
406. Elevation of Privilege - Windows Win32k (CVE-2026-83762) - High [420]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23132 |
407. Information Disclosure - .NET (CVE-2026-96229) - High [419]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.7 | 14 | .NET | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00815, EPSS Percentile is 0.56203 |
408. Information Disclosure - .NET (CVE-2026-96232) - High [419]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00693, EPSS Percentile is 0.51877 |
409. Information Disclosure - Windows IKE Extension (CVE-2026-83521) - High [419]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.7 | 14 | Internet Key Exchange (IKE, sometimes IKEv1 or IKEv2, depending on version) is the protocol used to set up a security association (SA) in the IPsec protocol suite | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00994, EPSS Percentile is 0.61919 |
410. Remote Code Execution - Windows Error Reporting (CVE-2026-83916) - High [419]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17884 |
411. Remote Code Execution - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-96953) - High [419]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.1467 |
412. Elevation of Privilege - Skype for Business (CVE-2026-83746) - High [418]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Skype for Business | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01013, EPSS Percentile is 0.62523 |
413. Information Disclosure - Windows Kernel (CVE-2026-108462) - High [417]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | Windows Kernel | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00469, EPSS Percentile is 0.39106 |
414. Information Disclosure - Windows Kernel (CVE-2026-70199) - High [417]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | Windows Kernel | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40705 |
415. Information Disclosure - Windows Kernel (CVE-2026-70232) - High [417]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | Windows Kernel | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40705 |
416. Elevation of Privilege - Microsoft Exchange (CVE-2026-87696) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00378, EPSS Percentile is 0.30164 |
417. Elevation of Privilege - Microsoft OpenSSH for Windows (CVE-2026-83769) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00367, EPSS Percentile is 0.28931 |
418. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-88191) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00382, EPSS Percentile is 0.30632 |
419. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-96911) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00402, EPSS Percentile is 0.32848 |
420. Elevation of Privilege - Windows AI (CVE-2026-69923) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00384, EPSS Percentile is 0.30814 |
421. Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-70225) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.2598 |
422. Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-70245) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30493 |
423. Elevation of Privilege - Windows AppX Deployment Extensions (CVE-2026-69945) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19479 |
424. Elevation of Privilege - Windows AppX Deployment Service (CVE-2026-85849) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0041, EPSS Percentile is 0.33671 |
425. Elevation of Privilege - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-85832) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29187 |
426. Elevation of Privilege - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-85843) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29187 |
427. Elevation of Privilege - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-85848) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29188 |
428. Elevation of Privilege - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-88118) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29188 |
429. Elevation of Privilege - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-88152) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27632 |
430. Elevation of Privilege - Windows Backup Engine (CVE-2026-70184) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00379, EPSS Percentile is 0.30258 |
431. Elevation of Privilege - Windows Bind Filter Driver (CVE-2026-70299) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00304, EPSS Percentile is 0.21654 |
432. Elevation of Privilege - Windows Bluetooth Driver (CVE-2026-83776) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00448, EPSS Percentile is 0.37405 |
433. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-97806) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25991 |
434. Elevation of Privilege - Windows COM+ Event System Service (CVE-2026-83830) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29189 |
435. Elevation of Privilege - Windows COM+ Event System Service (CVE-2026-83848) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29187 |
436. Elevation of Privilege - Windows Certificates (CVE-2026-69850) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25983 |
437. Elevation of Privilege - Windows Client for NFS (CVE-2026-69949) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25978 |
438. Elevation of Privilege - Windows Client for NFS (CVE-2026-70113) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25988 |
439. Elevation of Privilege - Windows Client-Side Caching (CSC) Service (CVE-2026-83699) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29188 |
440. Elevation of Privilege - Windows Common Log File System Driver (CVE-2026-70233) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Common Log File System is a general-purpose logging subsystem that is accessible to both kernel-mode as well as user-mode applications for building high-performance transaction logs | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29188 |
441. Elevation of Privilege - Windows Container Isolation FS Filter Driver (unionfs.sys) (CVE-2026-102202) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00353, EPSS Percentile is 0.27393 |
442. Elevation of Privilege - Windows Devices Human Interface (CVE-2026-83877) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.2599 |
443. Elevation of Privilege - Windows Direct Composition (CVE-2026-70151) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27643 |
444. Elevation of Privilege - Windows Direct Composition (CVE-2026-83896) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27642 |
445. Elevation of Privilege - Windows Direct Composition (CVE-2026-83902) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27642 |
446. Elevation of Privilege - Windows Direct Composition (CVE-2026-83903) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25979 |
447. Elevation of Privilege - Windows Direct Composition (CVE-2026-83922) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25985 |
448. Elevation of Privilege - Windows Direct Composition (CVE-2026-85902) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00344, EPSS Percentile is 0.26295 |
449. Elevation of Privilege - Windows Error Reporting (CVE-2026-69354) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25979 |
450. Elevation of Privilege - Windows Error Reporting (CVE-2026-70103) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27643 |
451. Elevation of Privilege - Windows Error Reporting (CVE-2026-83669) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30491 |
452. Elevation of Privilege - Windows GDI (CVE-2026-69884) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25983 |
453. Elevation of Privilege - Windows Graphics Component (CVE-2026-70286) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29187 |
454. Elevation of Privilege - Windows Graphics Component (CVE-2026-85901) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29189 |
455. Elevation of Privilege - Windows Graphics Component (CVE-2026-85908) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27632 |
456. Elevation of Privilege - Windows Graphics Kernel (CVE-2026-88073) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00265, EPSS Percentile is 0.17158 |
457. Elevation of Privilege - Windows Group Policy (CVE-2026-83932) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25976 |
458. Elevation of Privilege - Windows Host Guardian Service (CVE-2026-88072) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00353, EPSS Percentile is 0.27393 |
459. Elevation of Privilege - Windows IP Over USB Service (CVE-2026-70008) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25987 |
460. Elevation of Privilege - Windows Input System (CVE-2026-83763) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27644 |
461. Elevation of Privilege - Windows Installer (CVE-2026-69471) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25987 |
462. Elevation of Privilege - Windows Kerberos (CVE-2026-70064) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25989 |
463. Elevation of Privilege - Windows Kernel-Mode Driver (CVE-2026-83573) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00448, EPSS Percentile is 0.37405 |
464. Elevation of Privilege - Windows Kernel-Mode Drivers (CVE-2026-83637) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25977 |
465. Elevation of Privilege - Windows Local Security Authority Subsystem Service (LSASS) (CVE-2026-70015) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25991 |
466. Elevation of Privilege - Windows NTFS (CVE-2026-69916) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25978 |
467. Elevation of Privilege - Windows NTFS (CVE-2026-70010) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25987 |
468. Elevation of Privilege - Windows NTFS (CVE-2026-70172) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25989 |
469. Elevation of Privilege - Windows NTFS (CVE-2026-83508) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25982 |
470. Elevation of Privilege - Windows NTFS (CVE-2026-83567) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25984 |
471. Elevation of Privilege - Windows NetBIOS (CVE-2026-70054) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00412, EPSS Percentile is 0.33833 |
472. Elevation of Privilege - Windows OLE (CVE-2026-70059) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25987 |
473. Elevation of Privilege - Windows OLE (CVE-2026-70138) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25992 |
474. Elevation of Privilege - Windows Overlay Filter (CVE-2026-69950) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25978 |
475. Elevation of Privilege - Windows Overlay Filter (CVE-2026-69952) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.2599 |
476. Elevation of Privilege - Windows Overlay Filter (CVE-2026-69953) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25989 |
477. Elevation of Privilege - Windows Overlay Filter (CVE-2026-69957) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25978 |
478. Elevation of Privilege - Windows PCI Bus Driver (CVE-2026-96917) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23127 |
479. Elevation of Privilege - Windows Partition Management Driver (CVE-2026-83514) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25986 |
480. Elevation of Privilege - Windows Perception Simulation Service (CVE-2026-61931) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25982 |
481. Elevation of Privilege - Windows Portable Device Enumerator Service (CVE-2026-88133) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0041, EPSS Percentile is 0.33672 |
482. Elevation of Privilege - Windows Portable Device File System Driver (CVE-2026-70132) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27643 |
483. Elevation of Privilege - Windows Push Notifications (CVE-2026-83867) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29186 |
484. Elevation of Privilege - Windows Registry (CVE-2026-83927) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00395, EPSS Percentile is 0.32058 |
485. Elevation of Privilege - Windows Resilient File System (ReFS) (CVE-2026-70048) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25985 |
486. Elevation of Privilege - Windows Rich Text Edit Control (CVE-2026-70093) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25991 |
487. Elevation of Privilege - Windows Schannel (CVE-2026-70566) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25977 |
488. Elevation of Privilege - Windows Search Service (CVE-2026-83570) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25984 |
489. Elevation of Privilege - Windows Secure Socket Tunneling Protocol (SSTP) (CVE-2026-88147) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00344, EPSS Percentile is 0.26296 |
490. Elevation of Privilege - Windows Setup Files Cleanup (CVE-2026-73027) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00364, EPSS Percentile is 0.28656 |
491. Elevation of Privilege - Windows Shell (CVE-2026-70222) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00379, EPSS Percentile is 0.30258 |
492. Elevation of Privilege - Windows Shell (CVE-2026-83873) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00353, EPSS Percentile is 0.27393 |
493. Elevation of Privilege - Windows Shell (CVE-2026-83876) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25984 |
494. Elevation of Privilege - Windows Smart Card (CVE-2026-83579) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25981 |
495. Elevation of Privilege - Windows SmartScreen (CVE-2026-70051) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | SmartScreen is a cloud-based anti-phishing and anti-malware component included in several Microsoft products, including operating systems Windows 8 and later, the applications Internet Explorer, Microsoft Edge | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25985 |
496. Elevation of Privilege - Windows Spaceport.sys (CVE-2026-69934) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25979 |
497. Elevation of Privilege - Windows Spaceport.sys (CVE-2026-70102) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25992 |
498. Elevation of Privilege - Windows Subsystem for Linux (CVE-2026-70027) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25986 |
499. Elevation of Privilege - Windows UI Immersive Server API (CVE-2026-85905) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23156 |
500. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-83513) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25982 |
501. Elevation of Privilege - Windows Update (CVE-2026-69633) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25982 |
502. Elevation of Privilege - Windows Update (CVE-2026-69882) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0041, EPSS Percentile is 0.33613 |
503. Elevation of Privilege - Windows Update Service (CVE-2026-70139) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25988 |
504. Elevation of Privilege - Windows Update Service (CVE-2026-70142) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00364, EPSS Percentile is 0.28656 |
505. Elevation of Privilege - Windows Virtualization-Based Security (VBS) Enclave (CVE-2026-108471) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00331, EPSS Percentile is 0.2464 |
506. Elevation of Privilege - Windows Virtualization-Based Security (VBS) Enclave (CVE-2026-96914) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00265, EPSS Percentile is 0.17157 |
507. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-83761) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30492 |
508. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-83895) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00448, EPSS Percentile is 0.37406 |
509. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-85804) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00344, EPSS Percentile is 0.26296 |
510. Elevation of Privilege - Windows Wired AutoConfig Service (CVE-2026-69798) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25989 |
511. Elevation of Privilege - Windows exFAT File System (CVE-2026-83881) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.2598 |
512. Elevation of Privilege - Windows kernel32.dll (CVE-2026-68836) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25984 |
513. Remote Code Execution - Microsoft Office Excel (CVE-2026-97751) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00524, EPSS Percentile is 0.43118 |
514. Remote Code Execution - Microsoft Office SharePoint (CVE-2026-105013) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.7 | 10 | CVSS Base Score is 7.4. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0084, EPSS Percentile is 0.57006 |
ZDI: SharePoint Server: Besides the Critical bug already mentioned, SharePoint has 34 other CVEs this month: 13 EoP, seven spoofing, seven RCE, six info disclosure and one tampering bug. All of the rest are Important. The seven RCEs all lean on authentication, but the bar is low. CVE-2026-85900 needs only Site Member permissions, and CVE-2026-88155, 88163 and 88166 need Manage List. CVE-2026-105013 and 70267 don’t say what level an attacker needs, so assume these default permissions only. The bug classes read more like a web-app pentest report than memory corruption: seven of the EoPs are authorization and access-control failures, three more are SSRF, and the spoofing bugs are mostly stored script. The one other unauthenticated bug is CVE-2026-97783, a spoofing flaw at CVSS 8.1. Given SharePoint’s recent history of “Exploitation Less Likely” turning into “in the wild,” don’t skip the RCEs just because they need credentials.
515. Remote Code Execution - Microsoft Office SharePoint (CVE-2026-70267) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.7 | 10 | CVSS Base Score is 7.2. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00897, EPSS Percentile is 0.5877 |
516. Remote Code Execution - Microsoft Office Word (CVE-2026-70269) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00696, EPSS Percentile is 0.51997 |
517. Remote Code Execution - Microsoft Office Word (CVE-2026-88185) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51105 |
518. Remote Code Execution - Microsoft XML (CVE-2026-83914) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft XML | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00723, EPSS Percentile is 0.53026 |
519. Remote Code Execution - Network Policy Server (NPS) (CVE-2026-70207) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Network Policy Server (NPS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00663, EPSS Percentile is 0.50617 |
520. Remote Code Execution - Network Policy Server (NPS) (CVE-2026-85371) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Network Policy Server (NPS) | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51102 |
521. Remote Code Execution - Network Policy Server (NPS) (CVE-2026-85799) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Network Policy Server (NPS) | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51102 |
522. Remote Code Execution - Remote Desktop Gateway Service (CVE-2026-100218) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Remote Desktop Gateway Service | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00723, EPSS Percentile is 0.53026 |
523. Remote Code Execution - Remote Desktop Services Remote Code Execution Vulnerability (CVE-2026-69992) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Remote Desktop Services Remote Code Execution Vulnerability | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00569, EPSS Percentile is 0.45897 |
524. Remote Code Execution - SQL Server (CVE-2026-94512) - High [416]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | SQL Server | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.4069 |
525. Denial of Service - ASP.NET Core (CVE-2026-96233) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00766, EPSS Percentile is 0.54563 |
526. Denial of Service - Microsoft Windows Codecs Library (CVE-2026-102199) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00851, EPSS Percentile is 0.57389 |
527. Denial of Service - Windows Active Directory Domain Services (CVE-2026-83648) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01087, EPSS Percentile is 0.64672 |
528. Denial of Service - Windows Active Directory Domain Services (CVE-2026-83667) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01087, EPSS Percentile is 0.64672 |
529. Denial of Service - Windows Local Security Authority Subsystem Service (LSASS) (CVE-2026-83649) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01089, EPSS Percentile is 0.64724 |
530. Denial of Service - Windows Message Queuing Queue Manager (CVE-2026-85859) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0079, EPSS Percentile is 0.55359 |
531. Denial of Service - Windows Netlogon (CVE-2026-70072) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01089, EPSS Percentile is 0.64724 |
532. Elevation of Privilege - Microsoft Dynamics 365 Business Central (CVE-2026-105727) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Dynamics 365 Business Central | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00917, EPSS Percentile is 0.59441 |
533. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-102863) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00885, EPSS Percentile is 0.58444 |
534. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-70266) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0095, EPSS Percentile is 0.60475 |
535. Elevation of Privilege - WebDAV (CVE-2026-70262) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00837, EPSS Percentile is 0.56921 |
536. Security Feature Bypass - Windows Key Distribution Center (CVE-2026-69640) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00626, EPSS Percentile is 0.4889 |
537. Security Feature Bypass - Windows Remote Desktop (CVE-2026-59116) - High [413]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00364, EPSS Percentile is 0.28654 |
538. Remote Code Execution - Windows Hyper-V (CVE-2026-102214) - High [409]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00331, EPSS Percentile is 0.2464 |
ZDI: Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads.
539. Remote Code Execution - Windows Hyper-V (CVE-2026-105733) - High [409]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00331, EPSS Percentile is 0.24639 |
540. Remote Code Execution - Windows Hyper-V (CVE-2026-83716) - High [409]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23144 |
ZDI: Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads.
541. Denial of Service - .NET (CVE-2026-96958) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01056, EPSS Percentile is 0.63781 |
542. Denial of Service - .NET (CVE-2026-96960) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01056, EPSS Percentile is 0.63782 |
543. Elevation of Privilege - Windows Container Isolation FS Filter Driver (CVE-2026-70270) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32202 |
544. Elevation of Privilege - Windows Kernel (CVE-2026-70160) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17886 |
545. Elevation of Privilege - Windows Kernel (CVE-2026-70243) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17886 |
546. Elevation of Privilege - Windows Kernel (CVE-2026-83675) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.1788 |
547. Elevation of Privilege - Windows Kernel (CVE-2026-83736) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00409, EPSS Percentile is 0.33527 |
548. Elevation of Privilege - Windows Kernel (CVE-2026-83924) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17883 |
549. Elevation of Privilege - Windows Kernel (CVE-2026-85372) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15497 |
550. Elevation of Privilege - Windows Kernel (CVE-2026-88141) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15475 |
551. Elevation of Privilege - Windows Kernel (CVE-2026-96216) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.1548 |
552. Elevation of Privilege - Windows Kernel (CVE-2026-96868) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15478 |
553. Elevation of Privilege - Windows TCP/IP (CVE-2026-70164) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17885 |
554. Elevation of Privilege - Windows TCP/IP (CVE-2026-83682) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15478 |
555. Elevation of Privilege - Windows TCP/IP (CVE-2026-83842) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00267, EPSS Percentile is 0.17577 |
556. Elevation of Privilege - Windows TCP/IP (CVE-2026-85834) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15499 |
557. Elevation of Privilege - Windows TCP/IP (CVE-2026-96852) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15479 |
558. Elevation of Privilege - Windows Win32k (CVE-2026-70067) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17878 |
559. Elevation of Privilege - Windows Win32k (CVE-2026-70076) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00296, EPSS Percentile is 0.20794 |
560. Elevation of Privilege - Windows Win32k (CVE-2026-70144) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00296, EPSS Percentile is 0.20793 |
561. Elevation of Privilege - Windows Win32k (CVE-2026-70176) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00296, EPSS Percentile is 0.20794 |
562. Elevation of Privilege - Windows Win32k (CVE-2026-70209) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17881 |
563. Elevation of Privilege - Windows Win32k (CVE-2026-70236) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00276, EPSS Percentile is 0.18697 |
564. Elevation of Privilege - Windows Win32k (CVE-2026-70249) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00296, EPSS Percentile is 0.20793 |
565. Elevation of Privilege - Windows Win32k (CVE-2026-70253) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00296, EPSS Percentile is 0.20793 |
566. Elevation of Privilege - Windows Win32k (CVE-2026-70271) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00296, EPSS Percentile is 0.20794 |
567. Elevation of Privilege - Windows Win32k (CVE-2026-70273) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00276, EPSS Percentile is 0.18698 |
568. Elevation of Privilege - Windows Win32k (CVE-2026-83566) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.1788 |
569. Elevation of Privilege - Windows Win32k (CVE-2026-83866) - High [408]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15478 |
570. Remote Code Execution - Visual Studio Code (CVE-2026-102238) - High [407]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.3 | 14 | Integrated development environment | |
| 1.0 | 10 | CVSS Base Score is 9.6. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.0065, EPSS Percentile is 0.50039 |
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
571. Elevation of Privilege - Microsoft Office Graphics (CVE-2026-85881) - High [406]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Microsoft Office Graphics | |
| 0.8 | 10 | CVSS Base Score is 8.0. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00677, EPSS Percentile is 0.5123 |
572. Elevation of Privilege - Python (CVE-2026-85864) - High [406]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Python is a high-level, general-purpose programming language | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00745, EPSS Percentile is 0.53814 |
573. Elevation of Privilege - Skype for Business (CVE-2026-85873) - High [406]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Skype for Business | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00823, EPSS Percentile is 0.56472 |
574. Information Disclosure - Windows Kernel (CVE-2026-102187) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | Windows Kernel | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32198 |
575. Information Disclosure - Windows Win32k (CVE-2026-70211) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34127 |
576. Information Disclosure - Windows Win32k (CVE-2026-70284) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34123 |
577. Information Disclosure - Windows Win32k (CVE-2026-70292) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34123 |
578. Information Disclosure - Windows Win32k (CVE-2026-70293) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34125 |
579. Information Disclosure - Windows Win32k (CVE-2026-70294) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34128 |
580. Information Disclosure - Windows Win32k (CVE-2026-70295) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34128 |
581. Information Disclosure - Windows Win32k (CVE-2026-83755) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34129 |
582. Security Feature Bypass - Windows Kernel (CVE-2026-85939) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.9 | 14 | Windows Kernel | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00378, EPSS Percentile is 0.30104 |
583. Security Feature Bypass - Windows SMB Client (CVE-2026-84011) - High [405]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.9 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19875 |
584. Elevation of Privilege - Kernel Streaming Service Driver (CVE-2026-69963) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The Kernel Streaming Service Driver is a Windows kernel-mode component that manages low-latency, real-time streaming of multimedia data between hardware devices and applications | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21814 |
585. Elevation of Privilege - Kernel Streaming Service Driver (CVE-2026-69966) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The Kernel Streaming Service Driver is a Windows kernel-mode component that manages low-latency, real-time streaming of multimedia data between hardware devices and applications | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21812 |
586. Elevation of Privilege - Microsoft COM (CVE-2026-69909) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | COM is a platform-independent, distributed, object-oriented system for creating binary software components that can interact | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21813 |
587. Elevation of Privilege - Microsoft Windows Media Foundation (CVE-2026-102201) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23137 |
588. Elevation of Privilege - Microsoft Windows Media Foundation (CVE-2026-70278) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17886 |
589. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-108136) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23153 |
590. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-70177) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23132 |
591. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-83829) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23129 |
592. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-83850) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2313 |
593. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-85869) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23156 |
594. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-88182) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2315 |
595. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-96324) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23151 |
596. Elevation of Privilege - Windows Audio Service (CVE-2026-97799) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00302, EPSS Percentile is 0.21387 |
597. Elevation of Privilege - Windows Bind Filter Driver (CVE-2026-70274) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23127 |
598. Elevation of Privilege - Windows Bind Filter Driver (CVE-2026-83692) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23144 |
599. Elevation of Privilege - Windows Bind Filter Driver (CVE-2026-88168) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23149 |
600. Elevation of Privilege - Windows BitLocker (CVE-2026-83634) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23135 |
601. Elevation of Privilege - Windows BitLocker (CVE-2026-88070) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00329, EPSS Percentile is 0.24354 |
602. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-102196) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23136 |
603. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-97807) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00263, EPSS Percentile is 0.16927 |
604. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-97809) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00263, EPSS Percentile is 0.16927 |
605. Elevation of Privilege - Windows CD-ROM Driver (CVE-2026-85377) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23143 |
606. Elevation of Privilege - Windows COM+ Event System Service (CVE-2026-96933) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23124 |
607. Elevation of Privilege - Windows Camera Frame Server Monitor (CVE-2026-83753) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23133 |
608. Elevation of Privilege - Windows Client License Service (CVE-2026-96912) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23125 |
609. Elevation of Privilege - Windows Client-Side Caching (CSC) Service (CVE-2026-83698) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23134 |
610. Elevation of Privilege - Windows Container Isolation FS Filter Driver (unionfs.sys) (CVE-2026-97792) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00304, EPSS Percentile is 0.21653 |
611. Elevation of Privilege - Windows Container Isolation FS Filter Driver (unionfs.sys) (CVE-2026-97794) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23143 |
612. Elevation of Privilege - Windows Core Messaging (CVE-2026-83587) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23152 |
613. Elevation of Privilege - Windows DHCP Server (CVE-2026-83691) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23145 |
614. Elevation of Privilege - Windows DWM Core Library (CVE-2026-83726) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23144 |
615. Elevation of Privilege - Windows DWM Core Library (CVE-2026-88128) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23147 |
616. Elevation of Privilege - Windows DWM Core Library (CVE-2026-88179) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23149 |
617. Elevation of Privilege - Windows DWM Core Library (CVE-2026-88181) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23149 |
618. Elevation of Privilege - Windows DWM Core Library (CVE-2026-88188) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23148 |
619. Elevation of Privilege - Windows DWM Core Library (CVE-2026-88194) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23149 |
620. Elevation of Privilege - Windows Defender Firewall Service (CVE-2026-83679) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23145 |
621. Elevation of Privilege - Windows Device Association Service (CVE-2026-85332) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23139 |
622. Elevation of Privilege - Windows Device Install Service (CVE-2026-83792) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19491 |
623. Elevation of Privilege - Windows Direct Composition (CVE-2026-83912) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00263, EPSS Percentile is 0.16928 |
624. Elevation of Privilege - Windows Direct Composition (CVE-2026-85906) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00276, EPSS Percentile is 0.18643 |
625. Elevation of Privilege - Windows EAPHost Service (CVE-2026-84016) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23146 |
626. Elevation of Privilege - Windows Error Reporting (CVE-2026-83826) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23131 |
627. Elevation of Privilege - Windows Error Reporting (CVE-2026-83840) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0033, EPSS Percentile is 0.24434 |
628. Elevation of Privilege - Windows Error Reporting (CVE-2026-85800) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23146 |
629. Elevation of Privilege - Windows Geotag Broker (CVE-2026-83583) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00304, EPSS Percentile is 0.21653 |
630. Elevation of Privilege - Windows Graphics Kernel (CVE-2026-96118) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23126 |
631. Elevation of Privilege - Windows Group Policy (CVE-2026-100217) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19492 |
632. Elevation of Privilege - Windows Image Acquisition (CVE-2026-85842) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23141 |
633. Elevation of Privilege - Windows Installer (CVE-2026-69635) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.6. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0041, EPSS Percentile is 0.33688 |
634. Elevation of Privilege - Windows Installer (CVE-2026-83779) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23132 |
635. Elevation of Privilege - Windows Installer (CVE-2026-85358) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23145 |
636. Elevation of Privilege - Windows Installer (CVE-2026-85366) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23137 |
637. Elevation of Privilege - Windows Installer (CVE-2026-85796) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23154 |
638. Elevation of Privilege - Windows Installer (CVE-2026-87694) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23152 |
639. Elevation of Privilege - Windows Installer (CVE-2026-96308) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23129 |
640. Elevation of Privilege - Windows Internal System User Profile (CVE-2026-96244) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23151 |
641. Elevation of Privilege - Windows Kernel-Mode Drivers (CVE-2026-83568) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00304, EPSS Percentile is 0.21652 |
642. Elevation of Privilege - Windows Kernel-Mode Drivers (CVE-2026-83837) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19493 |
643. Elevation of Privilege - Windows Kernel-Mode Drivers (CVE-2026-85871) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23155 |
644. Elevation of Privilege - Windows MIDI Service Module (CVE-2026-83828) - High [404]
Description: Windows MIDI Service Module Elevation of Privileges Vulnerability
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23131 |
645. Elevation of Privilege - Windows Management Instrumentation (CVE-2026-83783) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23134 |
646. Elevation of Privilege - Windows Management Instrumentation (CVE-2026-96856) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23126 |
647. Elevation of Privilege - Windows Media (CVE-2026-83641) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2314 |
648. Elevation of Privilege - Windows Media (CVE-2026-83650) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23135 |
649. Elevation of Privilege - Windows Modern Device Management (MDM) (CVE-2026-108133) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23153 |
650. Elevation of Privilege - Windows Modern Device Management (MDM) (CVE-2026-83654) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19491 |
651. Elevation of Privilege - Windows Modern Device Management (MDM) (CVE-2026-85833) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23143 |
652. Elevation of Privilege - Windows NTFS (CVE-2026-83585) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23152 |
653. Elevation of Privilege - Windows NTFS (CVE-2026-83652) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23135 |
654. Elevation of Privilege - Windows NTFS (CVE-2026-83859) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2313 |
655. Elevation of Privilege - Windows NTFS (CVE-2026-96217) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23128 |
ZDI: Windows NTFS: NTFS has 26 CVEs this month: 16 EoP, six info disclosure and four RCE. All are Important, none is above CVSS 7.8, and 21 of the 26 are local. The EoPs all lead to SYSTEM, and five of them (CVE-2026-96217, 96916, 96918, 96928 and 96931) are sandbox escapes caused by reparse points created by sandboxed processes. That means a compromised browser or app sandbox could use them to break out. The four RCEs all require an authorized local attacker, so they’re closer to EoPs with extra steps than real remote bugs. Everything else is memory corruption: out-of-bounds reads lead, then use-after-frees and heap overflows.
656. Elevation of Privilege - Windows NTFS (CVE-2026-96916) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2315 |
657. Elevation of Privilege - Windows NTFS (CVE-2026-96918) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19492 |
658. Elevation of Privilege - Windows NTFS (CVE-2026-96928) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23125 |
659. Elevation of Privilege - Windows NTFS (CVE-2026-96931) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23124 |
660. Elevation of Privilege - Windows Now Playing Session Manager (CVE-2026-83700) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23144 |
661. Elevation of Privilege - Windows Overlay Filter (CVE-2026-105004) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23148 |
662. Elevation of Privilege - Windows Overlay Filter (CVE-2026-83727) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23145 |
663. Elevation of Privilege - Windows PCI Bus Driver (CVE-2026-85915) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23154 |
664. Elevation of Privilege - Windows Partition Management Driver (CVE-2026-103553) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23146 |
665. Elevation of Privilege - Windows Portable Device MTP Driver (CVE-2026-102206) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00417, EPSS Percentile is 0.34477 |
666. Elevation of Privilege - Windows Print Spooler Components (CVE-2026-85327) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23135 |
667. Elevation of Privilege - Windows Print Spooler Components (CVE-2026-85376) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19492 |
668. Elevation of Privilege - Windows Program Compatibility Assistant Service (CVE-2026-83781) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23134 |
669. Elevation of Privilege - Windows Program Compatibility Assistant Service (CVE-2026-96920) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23128 |
670. Elevation of Privilege - Windows Remote Desktop Protocol (CVE-2026-83861) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2313 |
ZDI: Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs.
671. Elevation of Privilege - Windows Resilient File System (ReFS) Deduplication Service (CVE-2026-83586) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19491 |
672. Elevation of Privilege - Windows Resource Management (MRM) (CVE-2026-87702) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23153 |
673. Elevation of Privilege - Windows Resume (CVE-2026-96318) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23126 |
674. Elevation of Privilege - Windows Search Service (CVE-2026-83920) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00263, EPSS Percentile is 0.16927 |
675. Elevation of Privilege - Windows Sensor Data Service (CVE-2026-83639) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2314 |
676. Elevation of Privilege - Windows Server Update Service (CVE-2026-105009) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19873 |
677. Elevation of Privilege - Windows Server Update Service (CVE-2026-81969) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00304, EPSS Percentile is 0.21654 |
678. Elevation of Privilege - Windows Server Update Service (CVE-2026-83499) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00304, EPSS Percentile is 0.21653 |
679. Elevation of Privilege - Windows SmartScreen (CVE-2026-85851) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | SmartScreen is a cloud-based anti-phishing and anti-malware component included in several Microsoft products, including operating systems Windows 8 and later, the applications Internet Explorer, Microsoft Edge | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00329, EPSS Percentile is 0.24355 |
680. Elevation of Privilege - Windows Spaceport.sys (CVE-2026-83832) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23127 |
681. Elevation of Privilege - Windows Spaceport.sys (CVE-2026-96862) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23147 |
682. Elevation of Privilege - Windows StateRepository API (CVE-2026-102216) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23138 |
683. Elevation of Privilege - Windows StateRepository API (CVE-2026-70218) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00317, EPSS Percentile is 0.23022 |
684. Elevation of Privilege - Windows StateRepository API (CVE-2026-85911) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23155 |
685. Elevation of Privilege - Windows Storage Port Driver (CVE-2026-102188) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00417, EPSS Percentile is 0.34477 |
686. Elevation of Privilege - Windows Storage Spaces Controller (CVE-2026-70238) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23127 |
687. Elevation of Privilege - Windows Storage Spaces Controller (CVE-2026-88100) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23148 |
688. Elevation of Privilege - Windows Storage VSP Driver (CVE-2026-85872) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15485 |
689. Elevation of Privilege - Windows Subsystem for Linux (CVE-2026-96309) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23151 |
690. Elevation of Privilege - Windows TCP/IP Local (CVE-2026-83872) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23129 |
691. Elevation of Privilege - Windows Telephony Server (CVE-2026-84013) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23146 |
692. Elevation of Privilege - Windows Text Services Framework (CVE-2026-85795) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23154 |
693. Elevation of Privilege - Windows USB Driver (CVE-2026-83588) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23153 |
694. Elevation of Privilege - Windows USB Driver (CVE-2026-83638) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2314 |
695. Elevation of Privilege - Windows USB Video Driver (CVE-2026-85341) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23137 |
696. Elevation of Privilege - Windows USB Video Driver (CVE-2026-85807) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23142 |
697. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-102205) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23138 |
698. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-102215) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23138 |
699. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-102218) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23138 |
700. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-83857) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2313 |
701. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-85820) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23141 |
702. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-96946) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23124 |
703. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-96947) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23124 |
704. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-96950) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23123 |
705. Elevation of Privilege - Windows Universal Plug and Play (UPnP) Device Host (CVE-2026-85373) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23136 |
706. Elevation of Privilege - Windows Universal Plug and Play (UPnP) Device Host (CVE-2026-85375) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23136 |
707. Elevation of Privilege - Windows Universal Plug and Play (UPnP) Device Host (CVE-2026-85927) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23154 |
708. Elevation of Privilege - Windows User Profile Service (CVE-2026-83659) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00278, EPSS Percentile is 0.18844 |
709. Elevation of Privilege - Windows VHD miniport driver (CVE-2026-102220) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23139 |
710. Elevation of Privilege - Windows Virtual Input (CVE-2026-83791) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19493 |
711. Elevation of Privilege - Windows Virtualization-Based Security (VBS) Enclave (CVE-2026-108130) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00331, EPSS Percentile is 0.24641 |
712. Elevation of Privilege - Windows Virtualization-Based Security (VBS) Enclave (CVE-2026-88074) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00331, EPSS Percentile is 0.2464 |
713. Elevation of Privilege - Windows Volume Manager Extension Driver (CVE-2026-85356) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23137 |
714. Elevation of Privilege - Windows WalletService (CVE-2026-96243) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00278, EPSS Percentile is 0.18844 |
715. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-83756) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00263, EPSS Percentile is 0.16926 |
716. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-85858) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15488 |
717. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-96249) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23129 |
718. Elevation of Privilege - Windows Wired AutoConfig Service (CVE-2026-85829) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23155 |
719. Elevation of Privilege - Windows exFAT File System (CVE-2026-85822) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23141 |
720. Remote Code Execution - Microsoft Graphics Component (CVE-2026-100215) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Graphics Component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00478, EPSS Percentile is 0.39752 |
721. Remote Code Execution - Microsoft Office Access (CVE-2026-105592) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00548, EPSS Percentile is 0.44611 |
722. Remote Code Execution - Microsoft Office Access (CVE-2026-105714) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00548, EPSS Percentile is 0.4461 |
723. Remote Code Execution - Microsoft Office PowerPoint (CVE-2026-105599) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00548, EPSS Percentile is 0.4461 |
724. Remote Code Execution - Microsoft Office PowerPoint (CVE-2026-88207) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00465, EPSS Percentile is 0.38775 |
725. Remote Code Execution - Microsoft Office Word (CVE-2026-105715) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00536, EPSS Percentile is 0.4389 |
726. Remote Code Execution - Microsoft Office Word (CVE-2026-97001) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00427, EPSS Percentile is 0.35462 |
727. Remote Code Execution - Network Device Enrollment Service (NDES) (CVE-2026-69802) - High [404]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Network Device Enrollment Service (NDES) | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00522, EPSS Percentile is 0.42937 |
728. Information Disclosure - Windows Hyper-V (CVE-2026-97813) - High [402]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60556 |
729. Denial of Service - ASP.NET Core (CVE-2026-70196) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00802, EPSS Percentile is 0.55785 |
730. Denial of Service - Windows Failover Cluster (CVE-2026-88099) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00836, EPSS Percentile is 0.56896 |
731. Denial of Service - Windows Wi-Fi Driver (CVE-2026-83703) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00594, EPSS Percentile is 0.47212 |
732. Elevation of Privilege - Configuration Manager (CVE-2026-88075) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Configuration Manager | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00642, EPSS Percentile is 0.49657 |
733. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-102860) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00698, EPSS Percentile is 0.52068 |
734. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-102861) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00698, EPSS Percentile is 0.52067 |
735. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-102862) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00698, EPSS Percentile is 0.52067 |
736. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-70246) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00748, EPSS Percentile is 0.53943 |
737. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-88164) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00741, EPSS Percentile is 0.53688 |
738. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-88198) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00698, EPSS Percentile is 0.52068 |
739. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-88200) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00698, EPSS Percentile is 0.52068 |
740. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-96044) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00698, EPSS Percentile is 0.52068 |
741. Security Feature Bypass - Windows AppX Deployment Service (CVE-2026-69979) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00346, EPSS Percentile is 0.26501 |
742. Security Feature Bypass - Windows BitLocker (CVE-2026-83500) - High [401]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 6.1. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00405, EPSS Percentile is 0.33132 |
743. Information Disclosure - Microsoft Defender (CVE-2026-70264) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Anti-malware component of Microsoft Windows | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00429, EPSS Percentile is 0.35632 |
744. Information Disclosure - Microsoft Windows Media Foundation (CVE-2026-70044) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00529, EPSS Percentile is 0.43463 |
745. Information Disclosure - Windows Backup Engine (CVE-2026-62687) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00446, EPSS Percentile is 0.37231 |
746. Information Disclosure - Windows Broadcast DVR User Service (CVE-2026-70148) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00357, EPSS Percentile is 0.27833 |
747. Information Disclosure - Windows Client Side Caching driver (csc.sys) (CVE-2026-96948) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00469, EPSS Percentile is 0.39106 |
748. Information Disclosure - Windows Clipboard User Service (CVE-2026-83893) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40704 |
749. Information Disclosure - Windows Common Log File System Driver (CVE-2026-83835) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Common Log File System is a general-purpose logging subsystem that is accessible to both kernel-mode as well as user-mode applications for building high-performance transaction logs | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00469, EPSS Percentile is 0.39107 |
750. Information Disclosure - Windows Cryptographic Services (CVE-2026-70055) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40703 |
751. Information Disclosure - Windows Fast FAT File System Driver (CVE-2026-70277) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00553, EPSS Percentile is 0.44934 |
752. Information Disclosure - Windows Hello (CVE-2026-83907) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40703 |
753. Information Disclosure - Windows Kernel-Mode Drivers (CVE-2026-85857) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00469, EPSS Percentile is 0.39106 |
754. Information Disclosure - Windows MIDI Service Module (CVE-2026-83773) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40705 |
755. Information Disclosure - Windows Projected File System (CVE-2026-70084) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00446, EPSS Percentile is 0.37231 |
756. Information Disclosure - Windows Remote Desktop Protocol (CVE-2026-102198) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00695, EPSS Percentile is 0.51962 |
757. Information Disclosure - Windows Storage (CVE-2026-96944) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00469, EPSS Percentile is 0.39105 |
758. Information Disclosure - Windows Subsystem for Linux (CVE-2026-96206) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32197 |
759. Information Disclosure - Windows Sysmain Service (CVE-2026-85793) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00469, EPSS Percentile is 0.39106 |
760. Information Disclosure - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-83713) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40704 |
761. Information Disclosure - Windows Update Orchestrator Service (CVE-2026-83507) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00446, EPSS Percentile is 0.37231 |
762. Information Disclosure - Windows Update Orchestrator Service (CVE-2026-83933) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00427, EPSS Percentile is 0.35399 |
763. Information Disclosure - Windows Wi-Fi Driver (CVE-2026-85816) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.7. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00519, EPSS Percentile is 0.42779 |
764. Information Disclosure - Windows iSCSI (CVE-2026-69644) - High [400]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40704 |
765. Elevation of Privilege - .NET (CVE-2026-70161) - Medium [399]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | .NET | |
| 0.7 | 10 | CVSS Base Score is 7.3. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00462, EPSS Percentile is 0.38523 |
766. Elevation of Privilege - .NET (CVE-2026-70190) - Medium [399]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | .NET | |
| 0.7 | 10 | CVSS Base Score is 7.3. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00462, EPSS Percentile is 0.38523 |
ZDI: Local Privilege Escalations: To say these bugs are prevalent is an understatement. However, of the 677 EoP bugs in the data, 606 (90%) lead to SYSTEM, administrator or root privileges. There are also a few integrity-level or sandbox escapes. There are 10 bugs where the attacker moves from low to medium integrity, and six where they escape a Low Integrity Level or AppContainer sandbox. There are seven bugs where the advisory says only “ELEVATED privileges,” or describes a cloud identity or data-access issue. There are nearly two dozen others where the attacker runs as another user or service account, creates or deletes files in a privileged context, or reaches Local Service. This includes CVE-2026-70190, which lets the attacker create, modify or delete files as SYSTEM but doesn’t give SYSTEM privileges. Frustratingly, there are 23 that have no “what privileges” FAQ at all, and some of these may be cloud fixes with no action needed. If I can be bothered to read them all, they should be bothered to write them all.
767. Elevation of Privilege - .NET (CVE-2026-96225) - Medium [399]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.2595 |
768. Elevation of Privilege - .NET (CVE-2026-96231) - Medium [399]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25949 |
769. Elevation of Privilege - SQLite (CVE-2026-69867) - Medium [399]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | SQLite is a database engine written in the C programming language | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25983 |
770. Information Disclosure - Azure HDInsight (CVE-2026-85891) - Medium [398]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Azure HDInsight | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00923, EPSS Percentile is 0.59613 |
771. Information Disclosure - Function Discovery Service (fdwsd.dll) (CVE-2026-83670) - Medium [398]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Function Discovery Service (fdwsd.dll) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00964, EPSS Percentile is 0.6093 |
772. Information Disclosure - Microsoft Azure Attestation service and Device Health Attestation Service (CVE-2026-69454) - Medium [398]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Azure Attestation service and Device Health Attestation Service | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00966, EPSS Percentile is 0.60988 |
773. Information Disclosure - Microsoft Azure Attestation service and Device Health Attestation Service (CVE-2026-69577) - Medium [398]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Azure Attestation service and Device Health Attestation Service | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00966, EPSS Percentile is 0.60988 |
774. Information Disclosure - Microsoft Office Outlook (CVE-2026-70281) - Medium [398]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Outlook | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01009, EPSS Percentile is 0.62391 |
775. Information Disclosure - Network Policy Server (NPS) (CVE-2026-96246) - Medium [398]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Network Policy Server (NPS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01005, EPSS Percentile is 0.62264 |
776. Elevation of Privilege - Dynamics Business Central (CVE-2026-102226) - Medium [397]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.4 | 14 | Dynamics Business Central | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00917, EPSS Percentile is 0.59442 |
777. Elevation of Privilege - Windows Kernel (CVE-2026-102207) - Medium [397]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08371 |
778. Elevation of Privilege - Windows Kernel (CVE-2026-88139) - Medium [397]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | Windows Kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.0967 |
779. Elevation of Privilege - Windows Win32k (CVE-2026-83841) - Medium [397]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08371 |
780. Remote Code Execution - Microsoft Internet Messaging API (CVE-2026-83919) - Medium [397]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Microsoft Internet Messaging API | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00253, EPSS Percentile is 0.15676 |
781. Remote Code Execution - Windows Hyper-V (CVE-2026-83931) - Medium [397]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17876 |
782. Denial of Service - .NET (CVE-2026-84008) - Medium [396]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00766, EPSS Percentile is 0.54563 |
783. Denial of Service - .NET (CVE-2026-96959) - Medium [396]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.7 | 14 | .NET | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00766, EPSS Percentile is 0.54562 |
784. Information Disclosure - .NET (CVE-2026-66822) - Medium [395]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.7 | 14 | .NET | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00674, EPSS Percentile is 0.51095 |
785. Remote Code Execution - Visual Studio Code (CVE-2026-102235) - Medium [395]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.3 | 14 | Integrated development environment | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00557, EPSS Percentile is 0.45154 |
786. Remote Code Execution - Visual Studio Code (CVE-2026-69370) - Medium [395]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.3 | 14 | Integrated development environment | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.007, EPSS Percentile is 0.52162 |
787. Denial of Service - Windows Kernel (CVE-2026-108466) - Medium [394]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.9 | 14 | Windows Kernel | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00633, EPSS Percentile is 0.49221 |
788. Information Disclosure - Windows Kernel (CVE-2026-83925) - Medium [393]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | Windows Kernel | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00377, EPSS Percentile is 0.30047 |
789. Information Disclosure - Windows Win32k (CVE-2026-70288) - Medium [393]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management. | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00317, EPSS Percentile is 0.23044 |
790. Elevation of Privilege - Microsoft Exchange (CVE-2026-87695) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00236, EPSS Percentile is 0.13539 |
791. Elevation of Privilege - Microsoft OpenSSH for Windows (CVE-2026-97811) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00236, EPSS Percentile is 0.13539 |
792. Elevation of Privilege - Microsoft Windows QoS Scheduler Driver (CVE-2026-87712) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.1467 |
793. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-70086) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15475 |
794. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-70115) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15492 |
795. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-70136) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15494 |
796. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-70150) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15495 |
797. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-70156) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00267, EPSS Percentile is 0.17577 |
798. Elevation of Privilege - Quality Windows Audio/Video Experience (QWAVE) service (CVE-2026-69977) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17876 |
799. Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-70168) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17887 |
800. Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-70205) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17882 |
801. Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-70237) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00287, EPSS Percentile is 0.19789 |
802. Elevation of Privilege - Windows AppX Deployment Service (CVE-2026-85934) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15489 |
803. Elevation of Privilege - Windows Application Compatibility Cache (CVE-2026-72955) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00276, EPSS Percentile is 0.18698 |
804. Elevation of Privilege - Windows Audio Service (CVE-2026-70118) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17877 |
805. Elevation of Privilege - Windows Audio Service (CVE-2026-70140) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17877 |
806. Elevation of Privilege - Windows Audio Service (CVE-2026-70230) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17883 |
807. Elevation of Privilege - Windows Audio Service (CVE-2026-83644) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15485 |
808. Elevation of Privilege - Windows Autopilot (CVE-2026-108134) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15486 |
809. Elevation of Privilege - Windows Backup Engine (CVE-2026-108135) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.1789 |
810. Elevation of Privilege - Windows Bind Filter Driver (CVE-2026-83900) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17876 |
811. Elevation of Privilege - Windows Bluetooth Port Driver (CVE-2026-83827) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15489 |
812. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-102193) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15484 |
813. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-102195) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15479 |
814. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-102197) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.1548 |
815. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-103554) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15481 |
816. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-103565) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15484 |
817. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-105722) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15491 |
818. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-108461) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15491 |
819. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-70122) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00265, EPSS Percentile is 0.17169 |
820. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-88105) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14668 |
821. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-97808) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17877 |
822. Elevation of Privilege - Windows COM+ Event System Service (CVE-2026-83785) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00287, EPSS Percentile is 0.19789 |
823. Elevation of Privilege - Windows Camera Frame Server Monitor (CVE-2026-85803) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15485 |
824. Elevation of Privilege - Windows Cash Drawer Protocol Provider (CVE-2026-85367) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15497 |
825. Elevation of Privilege - Windows Client License Service (CVE-2026-100201) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.1788 |
826. Elevation of Privilege - Windows Client-Side Caching (CSC) Service (CVE-2026-83580) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00287, EPSS Percentile is 0.1979 |
827. Elevation of Privilege - Windows Clipboard Server (CVE-2026-69795) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17878 |
828. Elevation of Privilege - Windows Cloud Files Mini Filter Driver (CVE-2026-83696) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15494 |
829. Elevation of Privilege - Windows Common Log File System Driver (CVE-2026-85355) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Common Log File System is a general-purpose logging subsystem that is accessible to both kernel-mode as well as user-mode applications for building high-performance transaction logs | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00287, EPSS Percentile is 0.1979 |
830. Elevation of Privilege - Windows Common Log File System Driver (CVE-2026-85868) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Common Log File System is a general-purpose logging subsystem that is accessible to both kernel-mode as well as user-mode applications for building high-performance transaction logs | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15485 |
831. Elevation of Privilege - Windows Common Log File System Driver (CVE-2026-85870) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Common Log File System is a general-purpose logging subsystem that is accessible to both kernel-mode as well as user-mode applications for building high-performance transaction logs | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00287, EPSS Percentile is 0.1979 |
832. Elevation of Privilege - Windows Composite Image File System (CVE-2026-85823) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15487 |
833. Elevation of Privilege - Windows Connected User Experiences and Telemetry (CVE-2026-83687) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15491 |
834. Elevation of Privilege - Windows Console Driver (CVE-2026-70223) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00276, EPSS Percentile is 0.18697 |
835. Elevation of Privilege - Windows Container Isolation FS Filter Driver (unionfs.sys) (CVE-2026-97810) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17882 |
836. Elevation of Privilege - Windows Credential Providers (CVE-2026-103568) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.0837 |
837. Elevation of Privilege - Windows DHCP Server (CVE-2026-70066) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17878 |
838. Elevation of Privilege - Windows DWM Core Library (CVE-2026-85853) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15486 |
839. Elevation of Privilege - Windows DWM Core Library (CVE-2026-85854) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15488 |
840. Elevation of Privilege - Windows DWM Core Library (CVE-2026-85855) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00287, EPSS Percentile is 0.19791 |
841. Elevation of Privilege - Windows DWM Core Library (CVE-2026-88177) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14671 |
842. Elevation of Privilege - Windows DWM Core Library (CVE-2026-88180) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14671 |
843. Elevation of Privilege - Windows DWM Core Library (CVE-2026-88189) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14668 |
844. Elevation of Privilege - Windows Device Association Service (CVE-2026-83710) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15482 |
845. Elevation of Privilege - Windows Device Association Service (CVE-2026-85342) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15496 |
846. Elevation of Privilege - Windows Device Association Service (CVE-2026-85352) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15491 |
847. Elevation of Privilege - Windows Diagnostic Policy Service (CVE-2026-83915) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17885 |
848. Elevation of Privilege - Windows Direct Composition (CVE-2026-70021) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17881 |
849. Elevation of Privilege - Windows Distributed File System (DFS) (CVE-2026-96938) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00332, EPSS Percentile is 0.24762 |
850. Elevation of Privilege - Windows Encrypting File System (EFS) (CVE-2026-85791) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00287, EPSS Percentile is 0.19791 |
851. Elevation of Privilege - Windows Error Reporting (CVE-2026-69387) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17883 |
852. Elevation of Privilege - Windows Error Reporting (CVE-2026-83689) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15493 |
853. Elevation of Privilege - Windows Error Reporting (CVE-2026-85354) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15486 |
854. Elevation of Privilege - Windows Event Tracing (CVE-2026-70134) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17885 |
855. Elevation of Privilege - Windows Event Tracing (CVE-2026-83707) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15483 |
856. Elevation of Privilege - Windows Fast FAT Driver (CVE-2026-85826) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15487 |
857. Elevation of Privilege - Windows Fax and Scan Service (CVE-2026-87707) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14668 |
858. Elevation of Privilege - Windows Graphics Kernel (CVE-2026-102194) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15484 |
859. Elevation of Privilege - Windows Graphics Kernel (CVE-2026-88110) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15493 |
860. Elevation of Privilege - Windows Hello (CVE-2026-83740) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15479 |
861. Elevation of Privilege - Windows Hello (CVE-2026-83790) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.1549 |
862. Elevation of Privilege - Windows Hello (CVE-2026-83853) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.1549 |
863. Elevation of Privilege - Windows Installer (CVE-2026-108468) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15489 |
864. Elevation of Privilege - Windows Installer (CVE-2026-70272) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15476 |
865. Elevation of Privilege - Windows Installer (CVE-2026-83676) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15477 |
866. Elevation of Privilege - Windows Installer (CVE-2026-83702) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15477 |
867. Elevation of Privilege - Windows Installer (CVE-2026-83708) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15482 |
868. Elevation of Privilege - Windows Installer (CVE-2026-83717) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00267, EPSS Percentile is 0.17578 |
869. Elevation of Privilege - Windows Installer (CVE-2026-83718) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15495 |
870. Elevation of Privilege - Windows Installer (CVE-2026-83767) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.1467 |
871. Elevation of Privilege - Windows Installer (CVE-2026-85361) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15492 |
872. Elevation of Privilege - Windows Installer (CVE-2026-85364) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15493 |
873. Elevation of Privilege - Windows Installer (CVE-2026-87700) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14667 |
874. Elevation of Privilege - Windows Installer (CVE-2026-87708) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15475 |
875. Elevation of Privilege - Windows Installer (CVE-2026-87711) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14668 |
876. Elevation of Privilege - Windows Installer (CVE-2026-88076) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15492 |
877. Elevation of Privilege - Windows Installer (CVE-2026-88080) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14671 |
878. Elevation of Privilege - Windows Installer (CVE-2026-88124) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15476 |
879. Elevation of Privilege - Windows Installer (CVE-2026-96302) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15483 |
880. Elevation of Privilege - Windows Installer (CVE-2026-96305) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15481 |
881. Elevation of Privilege - Windows Kerberos (CVE-2026-108132) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15498 |
882. Elevation of Privilege - Windows Kerberos (CVE-2026-70241) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00267, EPSS Percentile is 0.17577 |
883. Elevation of Privilege - Windows Kerberos (CVE-2026-83720) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15496 |
884. Elevation of Privilege - Windows Kernel-Mode Drivers (CVE-2026-96915) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14669 |
885. Elevation of Privilege - Windows Key Distribution Center (CVE-2026-69650) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00227, EPSS Percentile is 0.12534 |
886. Elevation of Privilege - Windows Local Security Authority (LSA) (CVE-2026-88161) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15492 |
887. Elevation of Privilege - Windows MIDI Service Module (CVE-2026-83751) - Medium [392]
Description: Windows MIDI Service Module Elevation of Privileges Vulnerability
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.1549 |
888. Elevation of Privilege - Windows MIDI Service Module (CVE-2026-88079) - Medium [392]
Description: Windows MIDI Service Module Elevation of Privileges Vulnerability
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15475 |
889. Elevation of Privilege - Windows Management Instrumentation (CVE-2026-85362) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15493 |
890. Elevation of Privilege - Windows Management Services (CVE-2026-87691) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14669 |
891. Elevation of Privilege - Windows Message Queuing Queue Manager (CVE-2026-85860) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14672 |
892. Elevation of Privilege - Windows Mobile Broadband (CVE-2026-97800) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00246, EPSS Percentile is 0.14738 |
893. Elevation of Privilege - Windows NTFS (CVE-2026-69915) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17878 |
894. Elevation of Privilege - Windows NTFS (CVE-2026-83706) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.7 | 10 | CVSS Base Score is 6.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00332, EPSS Percentile is 0.24762 |
895. Elevation of Privilege - Windows Network File System (CVE-2026-96209) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15496 |
896. Elevation of Privilege - Windows Now Playing Session Manager (CVE-2026-83701) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15479 |
897. Elevation of Privilege - Windows Print Spooler Components (CVE-2026-85933) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14669 |
898. Elevation of Privilege - Windows Program Compatibility Assistant Service (CVE-2026-69596) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17887 |
899. Elevation of Privilege - Windows Program Compatibility Assistant Service (CVE-2026-69743) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17877 |
900. Elevation of Privilege - Windows Program Compatibility Assistant Service (CVE-2026-72934) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17879 |
901. Elevation of Privilege - Windows Program Compatibility Assistant Service (CVE-2026-72968) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17879 |
902. Elevation of Privilege - Windows Program Compatibility Assistant Service (CVE-2026-72969) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17879 |
903. Elevation of Privilege - Windows Push Notifications (CVE-2026-70198) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17885 |
904. Elevation of Privilege - Windows Remote Access Connection Manager (CVE-2026-85867) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14672 |
905. Elevation of Privilege - Windows Routing and Remote Access Service (RRAS) (CVE-2026-84020) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15478 |
906. Elevation of Privilege - Windows SMB Server (CVE-2026-88127) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15476 |
907. Elevation of Privilege - Windows Search Service (CVE-2026-83564) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17887 |
908. Elevation of Privilege - Windows Search Service (CVE-2026-83574) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.1788 |
909. Elevation of Privilege - Windows Search Service (CVE-2026-83575) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17882 |
910. Elevation of Privilege - Windows Search Service (CVE-2026-83921) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00276, EPSS Percentile is 0.18698 |
911. Elevation of Privilege - Windows Secure Kernel Mode (CVE-2026-70026) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17887 |
912. Elevation of Privilege - Windows Security App (CVE-2026-105725) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.1549 |
913. Elevation of Privilege - Windows Setup Files Cleanup (CVE-2026-83509) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00295, EPSS Percentile is 0.20627 |
914. Elevation of Privilege - Windows Smart Card (CVE-2026-83584) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15487 |
915. Elevation of Privilege - Windows Storage (CVE-2026-100216) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15484 |
916. Elevation of Privilege - Windows Storage (CVE-2026-100225) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15495 |
917. Elevation of Privilege - Windows Storage (CVE-2026-102189) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15499 |
918. Elevation of Privilege - Windows Storage (CVE-2026-102191) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15498 |
919. Elevation of Privilege - Windows Storage (CVE-2026-83911) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17884 |
920. Elevation of Privilege - Windows Storage Port Driver (CVE-2026-96863) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00311, EPSS Percentile is 0.22385 |
921. Elevation of Privilege - Windows Storage Spaces Controller (CVE-2026-87706) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14669 |
922. Elevation of Privilege - Windows Storage Spaces Controller (CVE-2026-88143) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00256, EPSS Percentile is 0.16056 |
923. Elevation of Privilege - Windows Sysmain Service (CVE-2026-96306) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.14672 |
924. Elevation of Privilege - Windows Telephony Server (CVE-2026-85810) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15489 |
925. Elevation of Privilege - Windows USB Print Driver (CVE-2026-96250) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15481 |
926. Elevation of Privilege - Windows USB Print Driver (CVE-2026-96253) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.1548 |
927. Elevation of Privilege - Windows USB Print Driver (CVE-2026-96254) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15498 |
928. Elevation of Privilege - Windows USB Print Driver (CVE-2026-96301) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.1548 |
929. Elevation of Privilege - Windows USB Print Driver (CVE-2026-96304) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15483 |
930. Elevation of Privilege - Windows USB Print Driver (CVE-2026-96310) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15482 |
931. Elevation of Privilege - Windows USB Print Driver (CVE-2026-96319) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15494 |
932. Elevation of Privilege - Windows Universal Plug and Play (UPnP) Device Host (CVE-2026-85918) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15483 |
933. Elevation of Privilege - Windows Update (CVE-2026-96323) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15494 |
934. Elevation of Privilege - Windows Update Delivery Optimization (CVE-2026-108465) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15488 |
935. Elevation of Privilege - Windows Update Orchestrator Service (CVE-2026-83793) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00287, EPSS Percentile is 0.19793 |
936. Elevation of Privilege - Windows Update Orchestrator Service (CVE-2026-83886) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00296, EPSS Percentile is 0.20794 |
937. Elevation of Privilege - Windows Update Orchestrator Service (CVE-2026-97812) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17882 |
938. Elevation of Privilege - Windows Update Service (CVE-2026-100200) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17881 |
939. Elevation of Privilege - Windows Update Service (CVE-2026-100203) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17881 |
940. Elevation of Privilege - Windows Update Service (CVE-2026-70056) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17883 |
941. Elevation of Privilege - Windows Volume Manager Extension Driver (CVE-2026-83694) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15497 |
942. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-102208) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15498 |
943. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-83901) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17886 |
944. Elevation of Privilege - Windows Win32 Kernel Subsystem (CVE-2026-85802) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00267, EPSS Percentile is 0.17577 |
945. Elevation of Privilege - Windows Work Folders (CVE-2026-70045) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17879 |
946. Elevation of Privilege - Windows Workstation Service (CVE-2026-96923) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15481 |
947. Remote Code Execution - Microsoft Office Word (CVE-2026-70220) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00418, EPSS Percentile is 0.34599 |
948. Remote Code Execution - Microsoft SQL Server (CVE-2026-67625) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.8 | 10 | CVSS Base Score is 8.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00389, EPSS Percentile is 0.31405 |
949. Remote Code Execution - Microsoft SQL Server (CVE-2026-83945) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.7 | 10 | CVSS Base Score is 6.6. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00423, EPSS Percentile is 0.35037 |
950. Remote Code Execution - Microsoft SQL Server (CVE-2026-85886) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.8 | 10 | CVSS Base Score is 8.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00405, EPSS Percentile is 0.3314 |
951. Remote Code Execution - Microsoft SQL Server (CVE-2026-88083) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00348, EPSS Percentile is 0.26729 |
952. Remote Code Execution - Network Policy Server (NPS) (CVE-2026-85811) - Medium [392]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Network Policy Server (NPS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00359, EPSS Percentile is 0.28007 |
953. Denial of Service - Windows Netlogon (CVE-2026-70025) - Medium [389]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00828, EPSS Percentile is 0.56631 |
954. Elevation of Privilege - Azure Storage Library (CVE-2026-88094) - Medium [389]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Azure Storage Library | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to NVD data source | |
| 0.5 | 10 | EPSS Probability is 0.00635, EPSS Percentile is 0.49283 |
955. Security Feature Bypass - Windows DHCP Server (CVE-2026-83787) - Medium [389]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19876 |
956. Security Feature Bypass - Windows DHCP Server (CVE-2026-85865) - Medium [389]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19874 |
957. Security Feature Bypass - Windows Routing and Remote Access Service (RRAS) (CVE-2026-70057) - Medium [389]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19874 |
958. Security Feature Bypass - Windows Update Orchestrator Service (CVE-2026-81964) - Medium [389]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00309, EPSS Percentile is 0.22093 |
959. Information Disclosure - Microsoft Defender (CVE-2026-105726) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Anti-malware component of Microsoft Windows | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30462 |
960. Information Disclosure - Microsoft Windows Search Component (CVE-2026-70141) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.322 |
961. Information Disclosure - Microsoft Windows Search Component (CVE-2026-70173) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32195 |
962. Information Disclosure - Microsoft Windows Search Component (CVE-2026-83686) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34126 |
963. Information Disclosure - Microsoft Windows Search Component (CVE-2026-96910) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32198 |
964. Information Disclosure - Windows Aggregated Data Platform Service (CVE-2026-83870) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32202 |
965. Information Disclosure - Windows AppX Deployment Service (CVE-2026-69914) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34129 |
966. Information Disclosure - Windows Audio Service (CVE-2026-83571) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.3413 |
967. Information Disclosure - Windows Audio Service (CVE-2026-96314) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32197 |
968. Information Disclosure - Windows Bind Filter Driver (CVE-2026-85812) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00389, EPSS Percentile is 0.31387 |
969. Information Disclosure - Windows Biometric Service (CVE-2026-85831) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32199 |
970. Information Disclosure - Windows Broadcast DVR User Service (CVE-2026-103567) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32197 |
971. Information Disclosure - Windows Broadcast DVR User Service (CVE-2026-85938) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00342, EPSS Percentile is 0.26088 |
972. Information Disclosure - Windows CD-ROM Driver (CVE-2026-70041) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.3413 |
973. Information Disclosure - Windows Cryptographic Services (CVE-2026-69919) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34127 |
974. Information Disclosure - Windows DNS (CVE-2026-70074) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34126 |
975. Information Disclosure - Windows Device Association Service (CVE-2026-70227) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34127 |
976. Information Disclosure - Windows Device Association Service (CVE-2026-85336) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.322 |
977. Information Disclosure - Windows Device Association Service (CVE-2026-85815) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32203 |
978. Information Disclosure - Windows Encrypting File System (EFS) (CVE-2026-83565) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.3413 |
979. Information Disclosure - Windows Error Reporting (CVE-2026-83747) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34129 |
980. Information Disclosure - Windows Event Logging Service (CVE-2026-83695) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34125 |
981. Information Disclosure - Windows Event Logging Service (CVE-2026-83723) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34128 |
982. Information Disclosure - Windows Health and Optimized Experiences Service (CVE-2026-96183) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00342, EPSS Percentile is 0.26087 |
983. Information Disclosure - Windows Hello (CVE-2026-83849) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32196 |
984. Information Disclosure - Windows Human Interface Device (CVE-2026-83884) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00395, EPSS Percentile is 0.32102 |
985. Information Disclosure - Windows Human Interface Device (CVE-2026-83892) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00395, EPSS Percentile is 0.32101 |
986. Information Disclosure - Windows IP Over USB Service (CVE-2026-70011) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34123 |
987. Information Disclosure - Windows Imaging Component (CVE-2026-96859) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32196 |
988. Information Disclosure - Windows Installer (CVE-2026-85374) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32201 |
989. Information Disclosure - Windows Installer (CVE-2026-85830) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32195 |
990. Information Disclosure - Windows Kernel-Mode Drivers (CVE-2026-69971) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00357, EPSS Percentile is 0.27833 |
991. Information Disclosure - Windows Kernel-Mode Drivers (CVE-2026-96247) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32199 |
992. Information Disclosure - Windows Kernel-Mode Drivers (CVE-2026-96849) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32202 |
993. Information Disclosure - Windows Key Storage Provider (CVE-2026-88140) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32202 |
994. Information Disclosure - Windows Management Instrumentation (CVE-2026-85852) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32197 |
995. Information Disclosure - Windows Management Instrumentation (CVE-2026-96851) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32195 |
996. Information Disclosure - Windows Message Queuing Queue Manager (CVE-2026-96921) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32201 |
997. Information Disclosure - Windows Modern Device Management (MDM) (CVE-2026-96850) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32203 |
998. Information Disclosure - Windows NTFS (CVE-2026-83737) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34124 |
999. Information Disclosure - Windows NTFS (CVE-2026-83864) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00342, EPSS Percentile is 0.26087 |
1000. Information Disclosure - Windows NTFS (CVE-2026-96925) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.322 |
1001. Information Disclosure - Windows NTFS (CVE-2026-96935) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00362, EPSS Percentile is 0.28424 |
1002. Information Disclosure - Windows Netlogon (CVE-2026-70090) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34124 |
1003. Information Disclosure - Windows Network File System (CVE-2026-69675) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34125 |
1004. Information Disclosure - Windows Overlay Filter (CVE-2026-69954) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34128 |
1005. Information Disclosure - Windows Overlay Filter (CVE-2026-69967) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34125 |
1006. Information Disclosure - Windows Portable Device MTP Driver (CVE-2026-83794) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.322 |
1007. Information Disclosure - Windows Print Spooler Components (CVE-2026-83733) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34129 |
1008. Information Disclosure - Windows Projected File System (CVE-2026-96857) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00389, EPSS Percentile is 0.31387 |
1009. Information Disclosure - Windows Remote Access Connection Manager (CVE-2026-70137) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00357, EPSS Percentile is 0.27833 |
1010. Information Disclosure - Windows Remote POS Driver (CVE-2026-70135) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34127 |
1011. Information Disclosure - Windows Routing and Remote Access Service (RRAS) (CVE-2026-85794) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32199 |
1012. Information Disclosure - Windows Secure Kernel Mode (CVE-2026-70017) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34124 |
1013. Information Disclosure - Windows Secure Kernel Mode (CVE-2026-96865) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.6. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00361, EPSS Percentile is 0.28284 |
1014. Information Disclosure - Windows StateRepository API (CVE-2026-85910) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32203 |
1015. Information Disclosure - Windows Storage Port Driver (CVE-2026-88226) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.6. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00458, EPSS Percentile is 0.3824 |
1016. Information Disclosure - Windows USB Driver (CVE-2026-85935) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32201 |
1017. Information Disclosure - Windows USB Print Driver (CVE-2026-96860) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32196 |
1018. Information Disclosure - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-85909) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32198 |
1019. Information Disclosure - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-96930) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32203 |
1020. Information Disclosure - Windows Update (CVE-2026-69999) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows Update is a service that automates downloading and installing Windows software updates over the Internet | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.3413 |
1021. Information Disclosure - Windows Win32 Kernel Subsystem (CVE-2026-96848) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32196 |
1022. Information Disclosure - Windows iSCSI (CVE-2026-69721) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34124 |
1023. Information Disclosure - Windows rndismp6.sys (CVE-2026-83788) - Medium [388]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.6. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00458, EPSS Percentile is 0.38241 |
1024. Elevation of Privilege - .NET (CVE-2026-70165) - Medium [387]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | .NET | |
| 0.7 | 10 | CVSS Base Score is 6.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00353, EPSS Percentile is 0.27326 |
1025. Denial of Service - Active Directory Federation Services (AD FS) (CVE-2026-83645) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01103, EPSS Percentile is 0.65102 |
1026. Denial of Service - Active Directory Federation Services (AD FS) (CVE-2026-85319) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01103, EPSS Percentile is 0.65102 |
1027. Denial of Service - Network Device Enrollment Service (NDES) (CVE-2026-96861) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Network Device Enrollment Service (NDES) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66267 |
1028. Denial of Service - Network Device Enrollment Service (NDES) (CVE-2026-96866) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Network Device Enrollment Service (NDES) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.01149, EPSS Percentile is 0.66264 |
1029. Denial of Service - Network Policy Server (NPS) (CVE-2026-83655) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Network Policy Server (NPS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.012, EPSS Percentile is 0.67628 |
1030. Denial of Service - Role: DNS Server (CVE-2026-83635) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Role: DNS Server | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.7 | 10 | EPSS Probability is 0.012, EPSS Percentile is 0.67628 |
1031. Information Disclosure - Active Directory Federation Services (AD FS) (CVE-2026-97788) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00693, EPSS Percentile is 0.51877 |
1032. Information Disclosure - Microsoft Office Access (CVE-2026-94506) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Access | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00853, EPSS Percentile is 0.57465 |
1033. Information Disclosure - Microsoft Office Excel (CVE-2026-69922) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56849 |
1034. Information Disclosure - Microsoft Office Excel (CVE-2026-70219) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56851 |
1035. Information Disclosure - Microsoft Office Excel (CVE-2026-88151) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.5685 |
1036. Information Disclosure - Microsoft Office Excel (CVE-2026-88153) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56851 |
1037. Information Disclosure - Microsoft Office Excel (CVE-2026-88154) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56851 |
1038. Information Disclosure - Microsoft Office Excel (CVE-2026-88172) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56851 |
1039. Information Disclosure - Microsoft Office Excel (CVE-2026-88175) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.5685 |
1040. Information Disclosure - Microsoft Office Excel (CVE-2026-88190) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56852 |
1041. Information Disclosure - Microsoft Office Excel (CVE-2026-88192) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.5685 |
1042. Information Disclosure - Microsoft Office Excel (CVE-2026-97740) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56848 |
1043. Information Disclosure - Microsoft Office Excel (CVE-2026-97743) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56852 |
1044. Information Disclosure - Microsoft Office Excel (CVE-2026-97760) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56849 |
1045. Information Disclosure - Microsoft Office Excel (CVE-2026-97779) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56849 |
1046. Information Disclosure - Microsoft Office PowerPoint (CVE-2026-88183) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00853, EPSS Percentile is 0.57465 |
1047. Information Disclosure - Microsoft Office PowerPoint (CVE-2026-88203) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00853, EPSS Percentile is 0.57465 |
1048. Information Disclosure - Microsoft Office SharePoint (CVE-2026-70259) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00808, EPSS Percentile is 0.55992 |
1049. Information Disclosure - Microsoft Office SharePoint (CVE-2026-70298) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01091, EPSS Percentile is 0.64764 |
1050. Information Disclosure - Microsoft Office SharePoint (CVE-2026-85932) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01045, EPSS Percentile is 0.63471 |
1051. Information Disclosure - Microsoft Office Word (CVE-2026-102867) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00876, EPSS Percentile is 0.58176 |
1052. Information Disclosure - Microsoft Office Word (CVE-2026-70206) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56852 |
1053. Information Disclosure - Microsoft Office Word (CVE-2026-70263) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00887, EPSS Percentile is 0.58483 |
1054. Information Disclosure - Microsoft Office Word (CVE-2026-88167) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.56849 |
1055. Information Disclosure - Microsoft Office Word (CVE-2026-88169) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00835, EPSS Percentile is 0.5685 |
1056. Information Disclosure - Microsoft SharePoint Server (CVE-2026-105719) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft SharePoint Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00961, EPSS Percentile is 0.60854 |
1057. Information Disclosure - RPC Runtime (CVE-2026-83515) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | RPC Runtime | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00942, EPSS Percentile is 0.60249 |
1058. Information Disclosure - Remote Desktop Gateway Service (CVE-2026-84007) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Remote Desktop Gateway Service | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00994, EPSS Percentile is 0.61919 |
ZDI: Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs.
1059. Information Disclosure - Role: DNS Server (CVE-2026-108127) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60557 |
1060. Information Disclosure - Role: DNS Server (CVE-2026-108128) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60555 |
1061. Information Disclosure - Role: DNS Server (CVE-2026-108129) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60555 |
1062. Information Disclosure - Role: DNS Server (CVE-2026-97817) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60556 |
1063. Information Disclosure - Role: DNS Server (CVE-2026-97819) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60556 |
1064. Information Disclosure - WebDAV (CVE-2026-88137) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | WebDAV | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00952, EPSS Percentile is 0.60557 |
1065. Security Feature Bypass - Microsoft QUIC (CVE-2026-103577) - Medium [386]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.5 | 14 | Microsoft QUIC | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00518, EPSS Percentile is 0.42719 |
1066. Elevation of Privilege - Linux Kernel (CVE-2026-62840) - Medium [385]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.9 | 14 | The Linux kernel is a free and open-source, monolithic, modular, multitasking, Unix-like operating system kernel | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to NVD data source | |
| 0.0 | 10 | EPSS Probability is 0.0016, EPSS Percentile is 0.04659 |
1067. Denial of Service - RPC Endpoint Mapper Service (CVE-2026-96300) - Medium [384]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.7 | 14 | RPC Endpoint Mapper Service | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00836, EPSS Percentile is 0.56895 |
1068. 
Spoofing - Microsoft Exchange (CVE-2026-70279) - Medium [383]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft | |
| 0.9 | 10 | CVSS Base Score is 9.3. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00857, EPSS Percentile is 0.57605 |
Tenable: CVE-2026-70279 | Microsoft Exchange Server spoofing vulnerability
Tenable: CVE-2026-70279 is a spoofing vulnerability affecting Microsoft Exchange Server. It received a CVSSv3 score of 9.3 and is rated as important. It was assessed as “Exploitation More Likely.” An attacker could exploit this vulnerability by convincing a target through social engineering to click on a malicious link. Successful exploitation against a target with administrative privileges would allow an attacker to access or modify organizational data.
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
1069. Elevation of Privilege - Windows Hyper-V (CVE-2026-70023) - Medium [382]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25991 |
1070. Elevation of Privilege - Windows Hyper-V (CVE-2026-85343) - Medium [382]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00353, EPSS Percentile is 0.27393 |
1071. Information Disclosure - Dynamics Business Central (CVE-2026-105728) - Medium [381]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.4 | 14 | Dynamics Business Central | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00875, EPSS Percentile is 0.58147 |
1072. Information Disclosure - Windows Kernel (CVE-2026-70063) - Medium [381]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | Windows Kernel | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23192 |
1073. Information Disclosure - Windows Kernel (CVE-2026-70077) - Medium [381]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.9 | 14 | Windows Kernel | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23193 |
1074. Elevation of Privilege - Kernel Streaming Service Driver (CVE-2026-69964) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The Kernel Streaming Service Driver is a Windows kernel-mode component that manages low-latency, real-time streaming of multimedia data between hardware devices and applications | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00242, EPSS Percentile is 0.14301 |
1075. Elevation of Privilege - Kernel Streaming Service Driver (CVE-2026-69970) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The Kernel Streaming Service Driver is a Windows kernel-mode component that manages low-latency, real-time streaming of multimedia data between hardware devices and applications | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00242, EPSS Percentile is 0.143 |
1076. Elevation of Privilege - Microsoft OpenSSH for Windows (CVE-2026-83871) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00199, EPSS Percentile is 0.09072 |
1077. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-96937) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09669 |
1078. Elevation of Privilege - Windows ALPC (CVE-2026-83917) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00223, EPSS Percentile is 0.12016 |
1079. Elevation of Privilege - Windows Advanced Rasterization Platform (CVE-2026-84019) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09665 |
1080. Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-83738) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.0022, EPSS Percentile is 0.11641 |
1081. Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-88149) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09668 |
1082. Elevation of Privilege - Windows Autopilot (CVE-2026-96215) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08372 |
1083. Elevation of Privilege - Windows Background Intelligent Transfer Service (BITS) (CVE-2026-88146) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08368 |
1084. Elevation of Privilege - Windows Bind Filter Driver (CVE-2026-83852) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09665 |
1085. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-88103) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.0967 |
1086. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-88113) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.0967 |
1087. Elevation of Privilege - Windows Certificates (CVE-2026-69840) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00219, EPSS Percentile is 0.11466 |
1088. Elevation of Privilege - Windows Cloud Files Mini Filter Driver (CVE-2026-88106) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09671 |
1089. Elevation of Privilege - Windows Composite Image File System (CVE-2026-85824) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08372 |
1090. Elevation of Privilege - Windows Connected Devices Platform Service (CVE-2026-70169) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.0837 |
1091. Elevation of Privilege - Windows Container Isolation FS Filter Driver (unionfs.sys) (CVE-2026-97787) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10091 |
1092. Elevation of Privilege - Windows Credential Manager (CVE-2026-69736) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10093 |
1093. Elevation of Privilege - Windows Device Association Service (CVE-2026-84014) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.0022, EPSS Percentile is 0.11642 |
1094. Elevation of Privilege - Windows Embedded Mode Service (CVE-2026-85914) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09666 |
1095. Elevation of Privilege - Windows Embedded Mode Service (CVE-2026-96932) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08369 |
1096. Elevation of Privilege - Windows Error Reporting (CVE-2026-83750) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00205, EPSS Percentile is 0.09807 |
1097. Elevation of Privilege - Windows Image Acquisition (CVE-2026-85930) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09666 |
1098. Elevation of Privilege - Windows Installer (CVE-2026-83680) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09668 |
1099. Elevation of Privilege - Windows Installer (CVE-2026-83752) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09667 |
1100. Elevation of Privilege - Windows Installer (CVE-2026-83775) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10092 |
1101. Elevation of Privilege - Windows Installer (CVE-2026-83899) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00212, EPSS Percentile is 0.10702 |
1102. Elevation of Privilege - Windows Installer (CVE-2026-85941) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00205, EPSS Percentile is 0.09807 |
1103. Elevation of Privilege - Windows Installer (CVE-2026-87693) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09669 |
1104. Elevation of Privilege - Windows Installer (CVE-2026-87704) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09668 |
1105. Elevation of Privilege - Windows Installer (CVE-2026-87715) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09668 |
1106. Elevation of Privilege - Windows Installer (CVE-2026-96307) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09667 |
1107. Elevation of Privilege - Windows Kernel-Mode Drivers (CVE-2026-83834) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00205, EPSS Percentile is 0.09807 |
1108. Elevation of Privilege - Windows Management Instrumentation (CVE-2026-83724) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00225, EPSS Percentile is 0.12189 |
1109. Elevation of Privilege - Windows Modern Device Management (MDM) (CVE-2026-108396) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08369 |
1110. Elevation of Privilege - Windows NTFS (CVE-2026-81971) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00212, EPSS Percentile is 0.10702 |
1111. Elevation of Privilege - Windows Overlay Filter (CVE-2026-83749) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09667 |
1112. Elevation of Privilege - Windows Overlay Filter (CVE-2026-83879) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10092 |
1113. Elevation of Privilege - Windows Performance Monitor (CVE-2026-85333) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.7. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00247, EPSS Percentile is 0.14881 |
1114. Elevation of Privilege - Windows Phone Service (CVE-2026-85357) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08369 |
1115. Elevation of Privilege - Windows Print Spooler Components (CVE-2026-84018) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08371 |
1116. Elevation of Privilege - Windows Projected File System (CVE-2026-85328) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00225, EPSS Percentile is 0.12172 |
1117. Elevation of Privilege - Windows Push Notifications (CVE-2026-96313) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00225, EPSS Percentile is 0.12171 |
1118. Elevation of Privilege - Windows Remote Desktop Protocol (CVE-2026-96322) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09669 |
1119. Elevation of Privilege - Windows Security Support Provider Interface (CVE-2026-88098) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.0967 |
1120. Elevation of Privilege - Windows Setup Files Cleanup (CVE-2026-83505) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00226, EPSS Percentile is 0.12378 |
1121. Elevation of Privilege - Windows Setup Files Cleanup (CVE-2026-83510) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00212, EPSS Percentile is 0.10701 |
1122. Elevation of Privilege - Windows Setup and Deployment (CVE-2026-97793) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00241, EPSS Percentile is 0.14147 |
1123. Elevation of Privilege - Windows Storage (CVE-2026-69763) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10092 |
1124. Elevation of Privilege - Windows Storage (CVE-2026-69766) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10093 |
1125. Elevation of Privilege - Windows Storage (CVE-2026-69856) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10093 |
1126. Elevation of Privilege - Windows Storage (CVE-2026-69931) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10093 |
1127. Elevation of Privilege - Windows Storage (CVE-2026-69935) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00207, EPSS Percentile is 0.10091 |
1128. Elevation of Privilege - Windows Subsystem for Linux (CVE-2026-85879) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08372 |
1129. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-85825) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08371 |
1130. Elevation of Privilege - Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-96949) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.08369 |
1131. Elevation of Privilege - Windows Update Orchestrator Service (CVE-2026-83930) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00219, EPSS Percentile is 0.11467 |
1132. Elevation of Privilege - Windows Virtualization-Based Security (VBS) Enclave (CVE-2026-102211) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00197, EPSS Percentile is 0.08817 |
1133. Remote Code Execution - Azure CycleCloud (CVE-2026-100207) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Azure CycleCloud | |
| 0.7 | 10 | CVSS Base Score is 7.3. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00416, EPSS Percentile is 0.34377 |
1134. Remote Code Execution - HTTP.sys (CVE-2026-70247) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | HTTP.sys | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21812 |
1135. Remote Code Execution - Internet Connection Sharing (ICS) (CVE-2026-85856) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Internet Connection Sharing (ICS) | |
| 0.7 | 10 | CVSS Base Score is 7.1. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00363, EPSS Percentile is 0.28519 |
1136. Remote Code Execution - Microsoft Office Excel (CVE-2026-97009) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00323, EPSS Percentile is 0.23668 |
1137. Remote Code Execution - Microsoft Office Word (CVE-2026-96996) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0033, EPSS Percentile is 0.24448 |
1138. Remote Code Execution - Microsoft Power Apps (CVE-2026-70213) - Medium [380]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft Power Apps | |
| 0.8 | 10 | CVSS Base Score is 8.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00317, EPSS Percentile is 0.23024 |
1139. Security Feature Bypass - Windows Hyper-V (CVE-2026-87705) - Medium [379]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.7 | 10 | CVSS Base Score is 7.4. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00349, EPSS Percentile is 0.26856 |
ZDI: Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads.
1140. Elevation of Privilege - Azure Key Vault Client SDK (CVE-2026-85925) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Azure Key Vault Client SDK | |
| 0.8 | 10 | CVSS Base Score is 8.2. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00473, EPSS Percentile is 0.39468 |
1141. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-102866) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0054, EPSS Percentile is 0.44112 |
ZDI: - CVE-2026-102866 – Microsoft Office SharePoint Elevation of Privilege Vulnerability. There are lots of SharePoint bugs this month, but this one stands out. It’s the only Critical-rated SharePoint CVE (CVSS 8.1), and the only one an unauthenticated attacker can exploit. It’s an improper cryptographic signature verification bug. An attacker who obtains a valid proof token for a targeted user could modify it, submit it to the server, and authenticate as that user. The only caveat is that the attacker has to obtain that token first, but there are multiple methods this could be achieved.
1142. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-70202) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00506, EPSS Percentile is 0.41822 |
1143. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-70251) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00543, EPSS Percentile is 0.4435 |
1144. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-88206) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00506, EPSS Percentile is 0.41822 |
1145. Elevation of Privilege - Microsoft PostScript Printer Driver (CVE-2026-70092) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft PostScript Printer Driver | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00427, EPSS Percentile is 0.35462 |
1146. Elevation of Privilege - Microsoft PostScript Printer Driver (CVE-2026-70109) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft PostScript Printer Driver | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00427, EPSS Percentile is 0.35462 |
1147. Elevation of Privilege - Microsoft PostScript Printer Driver (CVE-2026-70110) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft PostScript Printer Driver | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00427, EPSS Percentile is 0.35462 |
1148. Elevation of Privilege - SQL Server (CVE-2026-96956) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | SQL Server | |
| 0.8 | 10 | CVSS Base Score is 8.0. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00423, EPSS Percentile is 0.35037 |
1149. Security Feature Bypass - Windows Hello (CVE-2026-70280) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.4 | 10 | CVSS Base Score is 4.4. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00379, EPSS Percentile is 0.30259 |
1150. Security Feature Bypass - Windows Hello (CVE-2026-83926) - Medium [377]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.4 | 10 | CVSS Base Score is 4.4. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32149 |
1151. Information Disclosure - Microsoft Bluetooth Driver (CVE-2026-83760) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Microsoft Bluetooth Driver | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00307, EPSS Percentile is 0.21934 |
1152. Information Disclosure - Windows Clipboard User Service (CVE-2026-83764) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00276, EPSS Percentile is 0.18634 |
1153. Information Disclosure - Windows DWM Core Library (CVE-2026-83765) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00319, EPSS Percentile is 0.23286 |
1154. Information Disclosure - Windows Device Association Service (CVE-2026-96854) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21777 |
1155. Information Disclosure - Windows Error Reporting (CVE-2026-83658) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00276, EPSS Percentile is 0.18634 |
1156. Information Disclosure - Windows Event Logging Service (CVE-2026-95904) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21776 |
1157. Information Disclosure - Windows Human Interface Device (CVE-2026-83875) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00292, EPSS Percentile is 0.20324 |
1158. Information Disclosure - Windows Installer (CVE-2026-83672) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00377, EPSS Percentile is 0.30048 |
1159. Information Disclosure - Windows NTFS (CVE-2026-83786) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00361, EPSS Percentile is 0.28284 |
1160. Information Disclosure - Windows NTFS (CVE-2026-96927) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | The default file system of the Windows NT family | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21777 |
1161. Information Disclosure - Windows Notification (CVE-2026-83854) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00264, EPSS Percentile is 0.1705 |
1162. Information Disclosure - Windows Portable Device File System Driver (CVE-2026-83664) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00319, EPSS Percentile is 0.23286 |
1163. Information Disclosure - Windows Print Spooler Components (CVE-2026-85320) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21777 |
1164. Information Disclosure - Windows Remote Access Service Infrastructure (CVE-2026-87698) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21777 |
1165. Information Disclosure - Windows Shell (CVE-2026-83905) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00377, EPSS Percentile is 0.30048 |
1166. Information Disclosure - Windows WLAN Service (CVE-2026-83668) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00319, EPSS Percentile is 0.23286 |
1167. Information Disclosure - Windows Win32 Kernel Subsystem (CVE-2026-83774) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00377, EPSS Percentile is 0.30047 |
1168. Information Disclosure - Windows Win32 Kernel Subsystem (CVE-2026-83897) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00361, EPSS Percentile is 0.28284 |
1169. Information Disclosure - Windows Win32 Kernel Subsystem (CVE-2026-83909) - Medium [376]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00377, EPSS Percentile is 0.30048 |
1170. Denial of Service - Active Directory Federation Services (AD FS) (CVE-2026-85321) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01056, EPSS Percentile is 0.63781 |
1171. Elevation of Privilege - Clipboard User Service (CVE-2026-85861) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | Clipboard User Service | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00242, EPSS Percentile is 0.143 |
1172. Elevation of Privilege - Clipboard User Service (CVE-2026-85863) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | Clipboard User Service | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00242, EPSS Percentile is 0.14302 |
1173. Security Feature Bypass - Active Directory Federation Services (AD FS) (CVE-2026-69982) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00567, EPSS Percentile is 0.45768 |
1174. Security Feature Bypass - Active Directory Federation Services (AD FS) (CVE-2026-70005) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00567, EPSS Percentile is 0.45768 |
1175. Security Feature Bypass - Azure Key Vault (CVE-2026-85922) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.5 | 14 | Azure Key Vault | |
| 0.7 | 10 | CVSS Base Score is 7.4. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00548, EPSS Percentile is 0.44647 |
1176. Security Feature Bypass - Microsoft Office Word (CVE-2026-88210) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00418, EPSS Percentile is 0.34599 |
1177. Security Feature Bypass - UEFI Secure Boot (CVE-2026-49785) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.5 | 14 | UEFI Secure Boot | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25981 |
1178. Security Feature Bypass - WebDAV (CVE-2026-87714) - Medium [375]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.5 | 14 | WebDAV | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0046, EPSS Percentile is 0.38406 |
1179. Information Disclosure - Microsoft Office Excel (CVE-2026-88184) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00626, EPSS Percentile is 0.48891 |
1180. Information Disclosure - Microsoft Office Excel (CVE-2026-88195) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00626, EPSS Percentile is 0.4889 |
1181. Information Disclosure - Microsoft Office Excel (CVE-2026-88201) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00626, EPSS Percentile is 0.4889 |
1182. Information Disclosure - Microsoft Office SharePoint (CVE-2026-102865) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00774, EPSS Percentile is 0.54809 |
1183. Information Disclosure - Microsoft SQL Server (CVE-2026-85888) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.8 | 10 | CVSS Base Score is 7.7. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00531, EPSS Percentile is 0.43562 |
1184. Information Disclosure - Microsoft SQL Server (CVE-2026-88081) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.8 | 10 | CVSS Base Score is 7.7. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00531, EPSS Percentile is 0.43562 |
1185. Information Disclosure - Role: DNS Server (CVE-2026-97820) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00736, EPSS Percentile is 0.53501 |
1186. Information Disclosure - Role: DNS Server (CVE-2026-97821) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00736, EPSS Percentile is 0.53501 |
1187. Information Disclosure - Role: DNS Server (CVE-2026-97822) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00736, EPSS Percentile is 0.53501 |
1188. Information Disclosure - Role: DNS Server (CVE-2026-97823) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00769, EPSS Percentile is 0.54652 |
1189. Information Disclosure - Role: DNS Server (CVE-2026-97824) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00769, EPSS Percentile is 0.54652 |
1190. Information Disclosure - Role: DNS Server (CVE-2026-97825) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00769, EPSS Percentile is 0.54651 |
1191. Information Disclosure - Role: DNS Server (CVE-2026-97826) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00769, EPSS Percentile is 0.54652 |
1192. Information Disclosure - Role: DNS Server (CVE-2026-97827) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00769, EPSS Percentile is 0.54652 |
1193. Information Disclosure - Role: DNS Server (CVE-2026-97828) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00769, EPSS Percentile is 0.54651 |
1194. Information Disclosure - Role: DNS Server (CVE-2026-97829) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00769, EPSS Percentile is 0.54651 |
1195. Information Disclosure - Role: DNS Server (CVE-2026-97831) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53444 |
1196. Information Disclosure - Role: DNS Server (CVE-2026-97835) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53444 |
1197. Information Disclosure - Role: DNS Server (CVE-2026-97836) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53443 |
1198. Information Disclosure - Role: DNS Server (CVE-2026-97837) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53445 |
1199. Information Disclosure - Role: DNS Server (CVE-2026-97838) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53446 |
1200. Information Disclosure - Role: DNS Server (CVE-2026-97839) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53444 |
1201. Information Disclosure - Role: DNS Server (CVE-2026-97840) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53443 |
1202. Information Disclosure - Role: DNS Server (CVE-2026-97841) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53445 |
1203. Information Disclosure - Role: DNS Server (CVE-2026-97843) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53445 |
1204. Information Disclosure - Role: DNS Server (CVE-2026-97844) - Medium [374]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00734, EPSS Percentile is 0.53444 |
1205. Denial of Service - .NET (CVE-2026-70162) - Medium [372]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.7 | 14 | .NET | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00768, EPSS Percentile is 0.54645 |
1206. Security Feature Bypass - .NET (CVE-2026-96238) - Medium [372]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.7 | 14 | .NET | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00235, EPSS Percentile is 0.13395 |
1207. Remote Code Execution - Visual Studio Code (CVE-2026-70098) - Medium [371]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.3 | 14 | Integrated development environment | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00408, EPSS Percentile is 0.33504 |
1208. Spoofing - Windows Schannel (CVE-2026-105008) - Medium [371]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 9.0. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00599, EPSS Percentile is 0.47516 |
1209. Elevation of Privilege - Microsoft Scripting Engine (CVE-2026-88193) - Medium [370]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Microsoft Scripting Engine | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21812 |
1210. Elevation of Privilege - Windows Hyper-V (CVE-2026-108399) - Medium [370]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.7 | 10 | CVSS Base Score is 7.2. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00344, EPSS Percentile is 0.26262 |
ZDI: Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads.
1211. Elevation of Privilege - Windows Hyper-V (CVE-2026-85369) - Medium [370]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.8 | 10 | CVSS Base Score is 8.2. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00332, EPSS Percentile is 0.24762 |
ZDI: Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads.
1212. Elevation of Privilege - Windows Hyper-V (CVE-2026-88071) - Medium [370]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23148 |
1213. Elevation of Privilege - Windows Hyper-V (CVE-2026-96223) - Medium [370]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23126 |
1214. Remote Code Execution - Microsoft SQL Server (CVE-2026-70189) - Medium [369]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.7 | 10 | CVSS Base Score is 6.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00256, EPSS Percentile is 0.16045 |
1215. Elevation of Privilege - Microsoft Bluetooth Driver (CVE-2026-83868) - Medium [368]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Microsoft Bluetooth Driver | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.00161, EPSS Percentile is 0.04875 |
1216. Elevation of Privilege - Microsoft Windows Search Component (CVE-2026-88160) - Medium [368]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.00156, EPSS Percentile is 0.04322 |
1217. Elevation of Privilege - Windows BitLocker (CVE-2026-85920) - Medium [368]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.00162, EPSS Percentile is 0.04894 |
1218. Elevation of Privilege - Windows Broadcast DVR User Service (CVE-2026-96919) - Medium [368]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.00156, EPSS Percentile is 0.04321 |
1219. Elevation of Privilege - Windows Cloud Files Mini Filter Driver (CVE-2026-88107) - Medium [368]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.00156, EPSS Percentile is 0.04322 |
1220. Elevation of Privilege - Windows DCOM Server (CVE-2026-88096) - Medium [368]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.00156, EPSS Percentile is 0.04322 |
1221. Elevation of Privilege - Windows Device Association Service (CVE-2026-85904) - Medium [368]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.00156, EPSS Percentile is 0.04321 |
1222. Information Disclosure - Windows Hyper-V (CVE-2026-83671) - Medium [367]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00414, EPSS Percentile is 0.34126 |
1223. Elevation of Privilege - Desktop Window Manager (CVE-2026-69880) - Medium [366]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Desktop Window Manager | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29163 |
1224. Elevation of Privilege - Desktop Window Manager (CVE-2026-69926) - Medium [366]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Desktop Window Manager | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00369, EPSS Percentile is 0.29163 |
1225. Elevation of Privilege - Desktop Window Manager (CVE-2026-70255) - Medium [366]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Desktop Window Manager | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00355, EPSS Percentile is 0.27616 |
1226. Elevation of Privilege - Microsoft Microsoft Defender for Endpoint (CVE-2026-102204) - Medium [366]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Microsoft Defender for Endpoint | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0034, EPSS Percentile is 0.25789 |
1227. Elevation of Privilege - Microsoft SQL Server (CVE-2026-68883) - Medium [366]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.8 | 10 | CVSS Base Score is 8.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00389, EPSS Percentile is 0.31405 |
1228. Elevation of Privilege - RPC Runtime (CVE-2026-83518) - Medium [366]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | RPC Runtime | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00341, EPSS Percentile is 0.25985 |
1229. Elevation of Privilege - Servicing Stack Updates (CVE-2026-83506) - Medium [366]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Servicing Stack Updates | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00364, EPSS Percentile is 0.28656 |
1230. Denial of Service - Windows DHCP Server (CVE-2026-70201) - Medium [365]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00409, EPSS Percentile is 0.33527 |
1231. Security Feature Bypass - Secure Boot (CVE-2026-102221) - Medium [365]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Secure boot is a security standard developed by members of the PC industry to help make sure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM) | |
| 0.4 | 10 | CVSS Base Score is 4.4. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00319, EPSS Percentile is 0.23235 |
1232. Security Feature Bypass - Windows Resilient File System (ReFS) (CVE-2026-70116) - Medium [365]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.4 | 10 | CVSS Base Score is 4.2. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00324, EPSS Percentile is 0.2379 |
1233. Security Feature Bypass - Windows Virtualization-Based Security (VBS) Enclave (CVE-2026-70075) - Medium [365]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.8 | 14 | Windows component | |
| 0.4 | 10 | CVSS Base Score is 4.4. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00277, EPSS Percentile is 0.18762 |
1234. 
Tampering - ASP.NET Core (CVE-2026-88092) - Medium [365]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | An open-source, server-side web-application framework designed for web development | |
| 0.9 | 10 | CVSS Base Score is 9.4. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00803, EPSS Percentile is 0.55815 |
1235. Information Disclosure - Windows ALPC (CVE-2026-85866) - Medium [364]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00292, EPSS Percentile is 0.20357 |
1236. Information Disclosure - Windows AppX Deployment Service (CVE-2026-69969) - Medium [364]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00331, EPSS Percentile is 0.24652 |
1237. Information Disclosure - Windows Graphics Kernel (CVE-2026-83582) - Medium [364]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23192 |
1238. Information Disclosure - Windows Key Storage Provider (CVE-2026-69506) - Medium [364]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23192 |
1239. Information Disclosure - Windows Network File System (CVE-2026-102186) - Medium [364]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23193 |
1240. Denial of Service - Active Directory Federation Services (AD FS) (CVE-2026-85324) - Medium [363]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00766, EPSS Percentile is 0.54562 |
1241. Denial of Service - Role: DNS Server (CVE-2026-88122) - Medium [363]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.0079, EPSS Percentile is 0.55359 |
1242. Denial of Service - Role: DNS Server (CVE-2026-88123) - Medium [363]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01089, EPSS Percentile is 0.64724 |
1243. Denial of Service - Role: DNS Server (CVE-2026-88125) - Medium [363]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01089, EPSS Percentile is 0.64725 |
1244. Denial of Service - Role: DNS Server (CVE-2026-88129) - Medium [363]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01089, EPSS Percentile is 0.64724 |
1245. Denial of Service - Role: DNS Server (CVE-2026-88130) - Medium [363]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.01089, EPSS Percentile is 0.64725 |
1246. Elevation of Privilege - Windows Security Center (CVE-2026-70212) - Medium [363]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | Windows Security Center (WSC) is a comprehensive reporting tool that helps users establish and maintain a protective security layer around their computer systems | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00241, EPSS Percentile is 0.14147 |
1247. Information Disclosure - Microsoft Office SharePoint (CVE-2026-70217) - Medium [362]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.5 | 10 | CVSS Base Score is 4.9. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00857, EPSS Percentile is 0.57622 |
1248. Information Disclosure - Microsoft QUIC (CVE-2026-85790) - Medium [362]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft QUIC | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00705, EPSS Percentile is 0.52353 |
1249. Information Disclosure - Role: DNS Server (CVE-2026-97832) - Medium [362]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00551, EPSS Percentile is 0.44812 |
1250. Information Disclosure - Role: DNS Server (CVE-2026-97833) - Medium [362]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00551, EPSS Percentile is 0.44813 |
1251. Information Disclosure - Role: DNS Server (CVE-2026-97834) - Medium [362]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00551, EPSS Percentile is 0.44813 |
1252. Information Disclosure - Role: DNS Server (CVE-2026-97842) - Medium [362]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Role: DNS Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00551, EPSS Percentile is 0.44812 |
1253. Spoofing - Windows Schannel (CVE-2026-85818) - Medium [359]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 9.0. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00423, EPSS Percentile is 0.35103 |
1254. Spoofing - Windows Shell (CVE-2026-83906) - Medium [359]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00893, EPSS Percentile is 0.58663 |
1255. Elevation of Privilege - Internet Explorer (CVE-2026-83741) - Medium [358]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Internet Explorer is a discontinued series of graphical web browsers developed by Microsoft | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00242, EPSS Percentile is 0.14301 |
1256. Remote Code Execution - Microsoft SQL Server (CVE-2026-88089) - Medium [357]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 1.0 | 15 | Remote Code Execution | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.7 | 10 | CVSS Base Score is 6.7. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00238, EPSS Percentile is 0.13847 |
1257. Information Disclosure - Microsoft Office Graphics Component (CVE-2026-105731) - Medium [355]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.6 | 14 | Microsoft Office | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00381, EPSS Percentile is 0.30462 |
1258. Elevation of Privilege - Desktop Window Manager (CVE-2026-70228) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Desktop Window Manager | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00328, EPSS Percentile is 0.24297 |
1259. Elevation of Privilege - Desktop Window Manager (CVE-2026-88093) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Desktop Window Manager | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00265, EPSS Percentile is 0.17157 |
1260. Elevation of Privilege - Desktop Window Manager (CVE-2026-96108) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Desktop Window Manager | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21813 |
1261. Elevation of Privilege - HID Class Driver (CVE-2026-105003) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | HID Class Driver | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21813 |
1262. Elevation of Privilege - HID Class Driver (CVE-2026-97804) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | HID Class Driver | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00328, EPSS Percentile is 0.24297 |
1263. Elevation of Privilege - HID Parser Library (CVE-2026-83569) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | HID Parser Library | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00328, EPSS Percentile is 0.24297 |
1264. Elevation of Privilege - Microsoft Account (CVE-2026-83847) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Account | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21813 |
1265. Elevation of Privilege - Microsoft Graphics Component (CVE-2026-70123) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Graphics Component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21814 |
1266. Elevation of Privilege - Microsoft Graphics Component (CVE-2026-85338) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Graphics Component | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00328, EPSS Percentile is 0.24298 |
1267. Elevation of Privilege - Microsoft Internet Information Services (CVE-2026-78459) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Internet Information Services | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00328, EPSS Percentile is 0.24298 |
1268. Elevation of Privilege - Microsoft Office Click-To-Run (CVE-2026-85340) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office Click-To-Run | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00328, EPSS Percentile is 0.24298 |
1269. Elevation of Privilege - Microsoft Office Click-To-Run (CVE-2026-88109) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office Click-To-Run | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21811 |
1270. Elevation of Privilege - Microsoft Office OneNote (CVE-2026-96997) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office OneNote | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21814 |
1271. Elevation of Privilege - Microsoft Office Word (CVE-2026-96995) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office Word | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21812 |
1272. Elevation of Privilege - Microsoft PowerToys (CVE-2026-96188) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft PowerToys | |
| 0.7 | 10 | CVSS Base Score is 7.3. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00366, EPSS Percentile is 0.28862 |
1273. Elevation of Privilege - Servicing Stack Updates (CVE-2026-83863) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Servicing Stack Updates | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23128 |
1274. Elevation of Privilege - Servicing Stack Updates (CVE-2026-85318) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Servicing Stack Updates | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23133 |
1275. Elevation of Privilege - SysInternals (CVE-2026-100205) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | SysInternals | |
| 0.7 | 10 | CVSS Base Score is 7.1. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00346, EPSS Percentile is 0.2649 |
1276. Elevation of Privilege - SysInternals (CVE-2026-105732) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | SysInternals | |
| 0.7 | 10 | CVSS Base Score is 7.3. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00407, EPSS Percentile is 0.33422 |
1277. Elevation of Privilege - WebDAV (CVE-2026-88126) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.2315 |
1278. Elevation of Privilege - WebDAV (CVE-2026-88135) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00284, EPSS Percentile is 0.19492 |
1279. Elevation of Privilege - WebDAV (CVE-2026-96843) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23147 |
1280. Elevation of Privilege - WebDAV (CVE-2026-96847) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23125 |
1281. Elevation of Privilege - Winlogon (CVE-2026-87699) - Medium [354]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Winlogon | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23152 |
1282. Denial of Service - Microsoft Windows VMSwitch (CVE-2026-69978) - Medium [353]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.6. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00324, EPSS Percentile is 0.23824 |
1283. Security Feature Bypass - Visual Studio Code (CVE-2026-102234) - Medium [353]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.3 | 14 | Integrated development environment | |
| 0.7 | 10 | CVSS Base Score is 7.4. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00636, EPSS Percentile is 0.49338 |
1284. Information Disclosure - Visual Studio Code (CVE-2026-102229) - Medium [352]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.3 | 14 | Integrated development environment | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.6 | 10 | EPSS Probability is 0.00932, EPSS Percentile is 0.59918 |
1285. Information Disclosure - Windows Ancillary Function Driver for WinSock (CVE-2026-70195) - Medium [352]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00234, EPSS Percentile is 0.13247 |
1286. Information Disclosure - Windows SmartScreen (CVE-2026-83504) - Medium [352]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | SmartScreen is a cloud-based anti-phishing and anti-malware component included in several Microsoft products, including operating systems Windows 8 and later, the applications Internet Explorer, Microsoft Edge | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00244, EPSS Percentile is 0.14517 |
1287. Information Disclosure - Windows Win32 Kernel Subsystem (CVE-2026-96853) - Medium [352]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00189, EPSS Percentile is 0.07991 |
1288. Denial of Service - Microsoft SQL Server (CVE-2026-67626) - Medium [351]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00588, EPSS Percentile is 0.46931 |
1289. Elevation of Privilege - Clipboard User Service (CVE-2026-85912) - Medium [351]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | Clipboard User Service | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.0015, EPSS Percentile is 0.03789 |
1290. Elevation of Privilege - Windows Security Center (CVE-2026-71347) - Medium [351]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.7 | 14 | Windows Security Center (WSC) is a comprehensive reporting tool that helps users establish and maintain a protective security layer around their computer systems | |
| 0.6 | 10 | CVSS Base Score is 6.4. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00216, EPSS Percentile is 0.11197 |
1291. Information Disclosure - Azure Active Directory (CVE-2026-85916) - Medium [350]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Azure Active Directory | |
| 0.6 | 10 | CVSS Base Score is 6.2. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00455, EPSS Percentile is 0.37975 |
1292. Information Disclosure - Azure DevOps (CVE-2026-69877) - Medium [350]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Azure DevOps | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00402, EPSS Percentile is 0.32884 |
1293. Information Disclosure - HTTP.sys (CVE-2026-83705) - Medium [350]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | HTTP.sys | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00471, EPSS Percentile is 0.39299 |
1294. Information Disclosure - Microsoft Office Excel (CVE-2026-70214) - Medium [350]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00498, EPSS Percentile is 0.41282 |
1295. Information Disclosure - Microsoft Office Excel (CVE-2026-97014) - Medium [350]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office Excel | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00498, EPSS Percentile is 0.41282 |
1296. Information Disclosure - Microsoft Office PowerPoint (CVE-2026-97744) - Medium [350]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00509, EPSS Percentile is 0.42083 |
1297. Information Disclosure - Microsoft Trace Data Helper (CVE-2026-70260) - Medium [350]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Trace Data Helper | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40705 |
1298. Information Disclosure - Microsoft Trace Data Helper (CVE-2026-70261) - Medium [350]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Trace Data Helper | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0049, EPSS Percentile is 0.40704 |
1299. Information Disclosure - .NET (CVE-2026-96234) - Medium [348]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.7 | 14 | .NET | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00282, EPSS Percentile is 0.19311 |
1300. Elevation of Privilege - Windows Hyper-V (CVE-2026-83839) - Medium [347]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.0837 |
1301. Denial of Service - Windows Hyper-V (CVE-2026-70248) - Medium [344]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00391, EPSS Percentile is 0.31593 |
1302. Denial of Service - Windows Hyper-V (CVE-2026-83636) - Medium [344]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00391, EPSS Percentile is 0.31593 |
1303. Security Feature Bypass - Windows Hyper-V (CVE-2026-83766) - Medium [344]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.4 | 10 | CVSS Base Score is 4.2. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00358, EPSS Percentile is 0.27973 |
1304. Elevation of Privilege - Microsoft Input Method Editor (IME) (CVE-2026-88101) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Input Method Editor (IME) | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00211, EPSS Percentile is 0.10569 |
1305. Elevation of Privilege - Microsoft Office Click-To-Run (CVE-2026-70276) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office Click-To-Run | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0026, EPSS Percentile is 0.16464 |
1306. Elevation of Privilege - Microsoft Virtual Hard Disk (CVE-2026-70252) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | The Virtual Hard Disk (Virtual Hard Disk (VHD) Miniport Driver) format is a publicly-available image format specification that allows encapsulation of the hard disk into an individual file. | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15477 |
1307. Elevation of Privilege - RPC Runtime (CVE-2026-83908) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | RPC Runtime | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.0027, EPSS Percentile is 0.17884 |
1308. Elevation of Privilege - Software Protection Platform (SPP) (CVE-2026-108464) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Software Protection Platform (SPP) | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15488 |
1309. Elevation of Privilege - SysInternals (CVE-2026-105729) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | SysInternals | |
| 0.7 | 10 | CVSS Base Score is 7.1. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00318, EPSS Percentile is 0.23169 |
1310. Elevation of Privilege - Virtual Hard Disk (VHD) Miniport Driver (CVE-2026-103555) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Virtual Hard Disk (VHD) Miniport Driver | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15482 |
1311. Elevation of Privilege - Virtual Hard Disk (VHD) Miniport Driver (CVE-2026-109453) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Virtual Hard Disk (VHD) Miniport Driver | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15476 |
1312. Elevation of Privilege - WebDAV (CVE-2026-85370) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15497 |
1313. Elevation of Privilege - WebDAV (CVE-2026-85828) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00252, EPSS Percentile is 0.15487 |
1314. Spoofing - Windows IKE Extension (CVE-2026-83522) - Medium [342]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.7 | 14 | Internet Key Exchange (IKE, sometimes IKEv1 or IKEv2, depending on version) is the protocol used to set up a security association (SA) in the IPsec protocol suite | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00723, EPSS Percentile is 0.53025 |
1315. Security Feature Bypass - Visual Studio Code (CVE-2026-102231) - Medium [341]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.3 | 14 | Integrated development environment | |
| 0.8 | 10 | CVSS Base Score is 7.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00378, EPSS Percentile is 0.30149 |
1316. Security Feature Bypass - Visual Studio Code (CVE-2026-102233) - Medium [341]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.3 | 14 | Integrated development environment | |
| 0.8 | 10 | CVSS Base Score is 7.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00421, EPSS Percentile is 0.34907 |
1317. Tampering - .NET Framework (CVE-2026-97801) - Medium [341]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | .NET Framework | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00609, EPSS Percentile is 0.47985 |
1318. Security Feature Bypass - Role: DNS Server (CVE-2026-70087) - Medium [339]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.5 | 14 | Role: DNS Server | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19874 |
1319. Information Disclosure - Desktop Window Manager (CVE-2026-70234) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Desktop Window Manager | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0038, EPSS Percentile is 0.30373 |
1320. Information Disclosure - HID Parser Library (CVE-2026-70128) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | HID Parser Library | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0038, EPSS Percentile is 0.30372 |
1321. Information Disclosure - HID Parser Library (CVE-2026-83887) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | HID Parser Library | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0038, EPSS Percentile is 0.30372 |
1322. Information Disclosure - HID Parser Library (CVE-2026-83898) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | HID Parser Library | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0038, EPSS Percentile is 0.30372 |
1323. Information Disclosure - HID Parser Library (CVE-2026-83904) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | HID Parser Library | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.0038, EPSS Percentile is 0.30373 |
1324. Information Disclosure - HTTP.sys (CVE-2026-70208) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | HTTP.sys | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00398, EPSS Percentile is 0.32389 |
1325. Information Disclosure - HTTP.sys (CVE-2026-83714) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | HTTP.sys | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00398, EPSS Percentile is 0.32389 |
1326. Information Disclosure - Microsoft Office PowerPoint (CVE-2026-97005) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Office PowerPoint | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00393, EPSS Percentile is 0.31809 |
1327. Information Disclosure - Microsoft SQL Server (CVE-2026-67628) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.5 | 10 | CVSS Base Score is 4.9. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00536, EPSS Percentile is 0.43883 |
1328. Information Disclosure - Remote Desktop Display Driver (CVE-2026-96321) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Remote Desktop Display Driver | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32198 |
1329. Information Disclosure - Servicing Stack Updates (CVE-2026-85835) - Medium [338]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Servicing Stack Updates | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00396, EPSS Percentile is 0.32199 |
1330. Spoofing - Windows Credential Guard (CVE-2026-70580) - Medium [335]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00304, EPSS Percentile is 0.21653 |
1331. Elevation of Privilege - Active Directory Certificate Services (AD CS) (CVE-2026-83666) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Active Directory Certificate Services (AD CS) | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00199, EPSS Percentile is 0.09071 |
1332. Elevation of Privilege - Connected Devices Platform Service (Cdpsvc) (CVE-2026-83846) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Connected Devices Platform Service (Cdpsvc) | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00242, EPSS Percentile is 0.14301 |
1333. Elevation of Privilege - Connected Devices Platform Service (Cdpsvc) (CVE-2026-95943) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Connected Devices Platform Service (Cdpsvc) | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00242, EPSS Percentile is 0.14301 |
1334. Elevation of Privilege - HID Class Driver (CVE-2026-105006) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | HID Class Driver | |
| 0.6 | 10 | CVSS Base Score is 6.4. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00311, EPSS Percentile is 0.22328 |
1335. Elevation of Privilege - Microsoft Account (CVE-2026-85329) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Account | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00199, EPSS Percentile is 0.09072 |
1336. Elevation of Privilege - Microsoft Graphics Component (CVE-2026-102209) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Graphics Component | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00242, EPSS Percentile is 0.143 |
1337. Elevation of Privilege - Microsoft Local Security Authority (LSA) Server (CVE-2026-83722) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Local Security Authority (LSA) Server | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00199, EPSS Percentile is 0.09071 |
1338. Elevation of Privilege - Microsoft Office Click-To-Run (CVE-2026-97774) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office Click-To-Run | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00186, EPSS Percentile is 0.07619 |
1339. Elevation of Privilege - Microsoft Office SharePoint (CVE-2026-105720) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.4 | 10 | CVSS Base Score is 4.3. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00435, EPSS Percentile is 0.3621 |
1340. Elevation of Privilege - Microsoft SQL Server (CVE-2026-85876) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00196, EPSS Percentile is 0.08673 |
1341. Elevation of Privilege - Microsoft SQL Server (CVE-2026-85919) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00183, EPSS Percentile is 0.07304 |
1342. Elevation of Privilege - Microsoft SQL Server (CVE-2026-88082) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00183, EPSS Percentile is 0.07305 |
1343. Elevation of Privilege - Microsoft SQL Server (CVE-2026-88088) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00183, EPSS Percentile is 0.07304 |
1344. Elevation of Privilege - Reliable Multicast Transport Driver (RMCAST) (CVE-2026-85943) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Reliable Multicast Transport Driver (RMCAST) | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00193, EPSS Percentile is 0.0837 |
1345. Elevation of Privilege - Servicing Stack Updates (CVE-2026-85365) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Servicing Stack Updates | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09667 |
1346. Elevation of Privilege - Servicing Stack Updates (CVE-2026-96939) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Servicing Stack Updates | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00205, EPSS Percentile is 0.09808 |
1347. Elevation of Privilege - Web Account Manager (CVE-2026-85846) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Web Account Manager | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09666 |
1348. Elevation of Privilege - WebDAV (CVE-2026-85827) - Medium [330]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | WebDAV | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00204, EPSS Percentile is 0.09666 |
1349. Tampering - Windows libarchive (CVE-2026-69968) - Medium [329]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00772, EPSS Percentile is 0.54767 |
1350. Tampering - Windows libarchive (CVE-2026-69973) - Medium [329]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00708, EPSS Percentile is 0.5247 |
1351. Denial of Service - Microsoft SQL Server (CVE-2026-94520) - Medium [327]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.5 | 10 | CVSS Base Score is 4.9. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00606, EPSS Percentile is 0.47851 |
1352. Information Disclosure - Azure Key Vault (CVE-2026-88132) - Medium [326]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Azure Key Vault | |
| 0.6 | 10 | CVSS Base Score is 5.9. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00319, EPSS Percentile is 0.23291 |
1353. Information Disclosure - Microsoft Digest Authentication (CVE-2026-88158) - Medium [326]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft Digest Authentication | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00294, EPSS Percentile is 0.2051 |
1354. Information Disclosure - Servicing Stack Updates (CVE-2026-83719) - Medium [326]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Servicing Stack Updates | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00319, EPSS Percentile is 0.23287 |
1355. Information Disclosure - WebDAV (CVE-2026-96846) - Medium [326]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | WebDAV | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00306, EPSS Percentile is 0.21778 |
1356. Spoofing - Windows Internet (wininet.dll) (CVE-2026-83845) - Medium [323]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.8 | 10 | CVSS Base Score is 8.4. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19861 |
1357. Elevation of Privilege - Microsoft Local Security Authority (LSA) Server (CVE-2026-87710) - Medium [318]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft Local Security Authority (LSA) Server | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.0 | 10 | EPSS Probability is 0.0015, EPSS Percentile is 0.03788 |
1358. Elevation of Privilege - Microsoft SQL Server (CVE-2026-88085) - Medium [318]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.85 | 15 | Elevation of Privilege | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.6 | 10 | CVSS Base Score is 6.4. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00191, EPSS Percentile is 0.08129 |
1359. Security Feature Bypass - Visual Studio Code (CVE-2026-102232) - Medium [317]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.3 | 14 | Integrated development environment | |
| 0.7 | 10 | CVSS Base Score is 7.0. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00333, EPSS Percentile is 0.24944 |
1360. Tampering - Windows Update Stack (CVE-2026-96218) - Medium [317]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00566, EPSS Percentile is 0.45715 |
1361. Denial of Service - Microsoft SQL Server (CVE-2026-88084) - Medium [315]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00454, EPSS Percentile is 0.37916 |
1362. Information Disclosure - Desktop Window Manager (CVE-2026-69974) - Medium [314]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Desktop Window Manager | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00293, EPSS Percentile is 0.20375 |
1363. Information Disclosure - Microsoft SQL Server (CVE-2026-88086) - Medium [314]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.83 | 15 | Information Disclosure | |
| 0.5 | 14 | Microsoft SQL Server | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00266, EPSS Percentile is 0.17484 |
1364. Spoofing - Active Directory Federation Services (AD FS) (CVE-2026-108131) - Medium [309]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.8 | 10 | CVSS Base Score is 7.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00739, EPSS Percentile is 0.53626 |
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
1365. Spoofing - Active Directory Federation Services (AD FS) (CVE-2026-83674) - Medium [309]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00643, EPSS Percentile is 0.49697 |
1366. Spoofing - Active Directory Federation Services (AD FS) (CVE-2026-96252) - Medium [309]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.9 | 10 | CVSS Base Score is 9.1. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.0048, EPSS Percentile is 0.39923 |
1367. Security Feature Bypass - Visual Studio Code (CVE-2026-102851) - Medium [305]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.9 | 15 | Security Feature Bypass | |
| 0.3 | 14 | Integrated development environment | |
| 0.6 | 10 | CVSS Base Score is 6.1. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00258, EPSS Percentile is 0.16293 |
1368. Spoofing - Windows Event Tracing (CVE-2026-70235) - Medium [300]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19873 |
1369. Spoofing - Active Directory Federation Services (AD FS) (CVE-2026-103576) - Medium [297]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.7 | 10 | CVSS Base Score is 6.5. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00772, EPSS Percentile is 0.5477 |
1370. Spoofing - Active Directory Federation Services (AD FS) (CVE-2026-83511) - Medium [297]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.7 | 10 | CVSS Base Score is 7.4. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00588, EPSS Percentile is 0.46933 |
1371. Spoofing - Active Directory Federation Services (AD FS) (CVE-2026-96222) - Medium [297]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.7 | 10 | CVSS Base Score is 7.4. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00583, EPSS Percentile is 0.46646 |
1372. Spoofing - Microsoft Office SharePoint (CVE-2026-88204) - Medium [297]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.7 | 10 | CVSS Base Score is 7.3. According to Microsoft data source | |
| 0.5 | 10 | EPSS Probability is 0.00625, EPSS Percentile is 0.48815 |
1373. Tampering - Windows Container Isolation FS Filter Driver (unionfs.sys) (CVE-2026-97790) - Medium [294]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00372, EPSS Percentile is 0.29563 |
1374. Tampering - Windows Error Reporting (CVE-2026-83715) - Medium [294]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.7 | 10 | CVSS Base Score is 7.1. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19861 |
1375. Tampering - Windows Security Account Manager (CVE-2026-96858) - Medium [294]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00352, EPSS Percentile is 0.27222 |
1376. Spoofing - Windows Hyper-V (CVE-2026-83728) - Medium [290]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.6 | 14 | Hardware virtualization component of the client editions of Windows NT | |
| 0.9 | 10 | CVSS Base Score is 8.8. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00245, EPSS Percentile is 0.1467 |
1377. Spoofing - Windows Update Stack (CVE-2026-83798) - Medium [288]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00215, EPSS Percentile is 0.11077 |
1378. Spoofing - Windows Virtualization-Based Security (VBS) Enclave (CVE-2026-70097) - Medium [288]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.6. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00202, EPSS Percentile is 0.09401 |
1379. Spoofing - Windows Virtualization-Based Security (VBS) Enclave (CVE-2026-83885) - Medium [288]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.6. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.0019, EPSS Percentile is 0.08069 |
1380. Spoofing - Microsoft Office SharePoint (CVE-2026-97783) - Medium [285]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.8 | 10 | CVSS Base Score is 8.1. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00419, EPSS Percentile is 0.34705 |
ZDI: SharePoint Server: Besides the Critical bug already mentioned, SharePoint has 34 other CVEs this month: 13 EoP, seven spoofing, seven RCE, six info disclosure and one tampering bug. All of the rest are Important. The seven RCEs all lean on authentication, but the bar is low. CVE-2026-85900 needs only Site Member permissions, and CVE-2026-88155, 88163 and 88166 need Manage List. CVE-2026-105013 and 70267 don’t say what level an attacker needs, so assume these default permissions only. The bug classes read more like a web-app pentest report than memory corruption: seven of the EoPs are authorization and access-control failures, three more are SSRF, and the spoofing bugs are mostly stored script. The one other unauthenticated bug is CVE-2026-97783, a spoofing flaw at CVSS 8.1. Given SharePoint’s recent history of “Exploitation Less Likely” turning into “in the wild,” don’t skip the RCEs just because they need credentials.
1381. Spoofing - Network Device Enrollment Service (NDES) (CVE-2026-85323) - Medium [285]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Network Device Enrollment Service (NDES) | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00492, EPSS Percentile is 0.40853 |
1382. Tampering - Windows AppX Deployment Service (CVE-2026-69905) - Medium [282]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00309, EPSS Percentile is 0.22092 |
1383. Tampering - Windows Encrypting File System (EFS) (CVE-2026-88162) - Medium [282]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19875 |
1384. Tampering - Windows Host Guardian Service (CVE-2026-87709) - Medium [282]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00249, EPSS Percentile is 0.1503 |
1385. Tampering - Windows Modern Device Management (MDM) (CVE-2026-96855) - Medium [282]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19873 |
1386. Tampering - Windows Network List Service (CVE-2026-96311) - Medium [282]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19876 |
1387. Tampering - Windows Overlay Filter (CVE-2026-96315) - Medium [282]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19876 |
1388. Tampering - Windows Routing and Remote Access Service (RRAS) (CVE-2026-96316) - Medium [282]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19875 |
1389. Tampering - Windows SmartScreen (CVE-2026-62879) - Medium [282]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | SmartScreen is a cloud-based anti-phishing and anti-malware component included in several Microsoft products, including operating systems Windows 8 and later, the applications Internet Explorer, Microsoft Edge | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00309, EPSS Percentile is 0.22093 |
1390. Tampering - Windows Internet (wininet.dll) (CVE-2026-83865) - Medium [270]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00273, EPSS Percentile is 0.18393 |
1391. Tampering - Windows Modern Device Management (MDM) (CVE-2026-83657) - Medium [270]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00222, EPSS Percentile is 0.11842 |
1392. Denial of Service - MessagePack-CSharp (CVE-2026-92707) - Medium [267]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.7 | 15 | Denial of Service | |
| 0.5 | 14 | MessagePack-CSharp | |
| 0.5 | 10 | CVSS Base Score is 5.3. According to Microsoft data source | |
| 0 | 10 | EPSS Probability is 0, EPSS Percentile is 0 |
ZDI: Two bugs in this release are listed as publicly known: CVE-2026-108398, a .NET Framework security feature bypass that could let an attacker evade Windows Defender Application Control (WDAC) enforcement, and CVE-2026-92707, a denial-of-service bug in MessagePack-CSharp that was released by a third party and is now included in Microsoft’s release. Neither is listed as under active attack. As always, we’ll start with the bug under active attack and move on from there.
1393. Tampering - Microsoft Office SharePoint (CVE-2026-97782) - Medium [267]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.7 | 10 | CVSS Base Score is 6.8. According to Microsoft data source | |
| 0.4 | 10 | EPSS Probability is 0.00531, EPSS Percentile is 0.43573 |
1394. Tampering - Windows Mobile Device Management (CVE-2026-70216) - Medium [265]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.7 | 14 | Windows component | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00309, EPSS Percentile is 0.22093 |
1395. Spoofing - Microsoft Office SharePoint (CVE-2026-105713) - Medium [261]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.6 | 10 | CVSS Base Score is 5.7. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00368, EPSS Percentile is 0.29028 |
1396. Tampering - Windows Modern Device Management (MDM) (CVE-2026-83656) - Medium [258]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00235, EPSS Percentile is 0.1333 |
1397. Tampering - Windows Modern Device Management (MDM) (CVE-2026-83697) - Medium [258]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00202, EPSS Percentile is 0.09401 |
1398. Tampering - Windows Projected File System (CVE-2026-84009) - Medium [258]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.8 | 14 | Windows component | |
| 0.5 | 10 | CVSS Base Score is 4.7. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00202, EPSS Percentile is 0.09401 |
1399. Spoofing - Active Directory Federation Services (AD FS) (CVE-2026-83646) - Medium [250]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Active Directory Federation Services (AD FS) | |
| 0.5 | 10 | CVSS Base Score is 4.8. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00368, EPSS Percentile is 0.29101 |
1400. Spoofing - Microsoft Office SharePoint (CVE-2026-102859) - Medium [250]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.5 | 10 | CVSS Base Score is 4.6. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00363, EPSS Percentile is 0.28489 |
1401. Spoofing - Microsoft Office SharePoint (CVE-2026-102864) - Medium [250]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.5 | 10 | CVSS Base Score is 4.6. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00363, EPSS Percentile is 0.28489 |
1402. Spoofing - Microsoft Office SharePoint (CVE-2026-88209) - Medium [250]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.5 | 10 | CVSS Base Score is 4.6. According to Microsoft data source | |
| 0.3 | 10 | EPSS Probability is 0.00363, EPSS Percentile is 0.28489 |
1403. Spoofing - Microsoft Office SharePoint (CVE-2026-88208) - Medium [238]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.4 | 15 | Spoofing | |
| 0.5 | 14 | Microsoft Office SharePoint | |
| 0.5 | 10 | CVSS Base Score is 4.6. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00272, EPSS Percentile is 0.18268 |
1404. Tampering - Microsoft PowerToys (CVE-2026-83681) - Medium [232]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.5 | 14 | Microsoft PowerToys | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00297, EPSS Percentile is 0.20848 |
1405. Tampering - Role: DNS Server (CVE-2026-103560) - Medium [232]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.5 | 14 | Role: DNS Server | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19874 |
1406. Tampering - Role: DNS Server (CVE-2026-70083) - Medium [232]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.5 | 14 | Role: DNS Server | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19876 |
1407. Tampering - Role: DNS Server (CVE-2026-70085) - Medium [232]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.5 | 14 | Role: DNS Server | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19873 |
1408. Tampering - Role: DNS Server (CVE-2026-96926) - Medium [232]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.5 | 14 | Role: DNS Server | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.2 | 10 | EPSS Probability is 0.00288, EPSS Percentile is 0.19875 |
1409. Tampering - Role: DNS Server (CVE-2026-70071) - Medium [220]
Description:
| Component | Value | Weight | Comment |
|---|---|---|---|
| 0 | 18 | Exploitation in the wild is NOT mentioned in available Data Sources | |
| 0 | 17 | The existence of publicly available or private exploit is NOT mentioned in available Data Sources | |
| 0.3 | 15 | Tampering | |
| 0.5 | 14 | Role: DNS Server | |
| 0.6 | 10 | CVSS Base Score is 5.5. According to Microsoft data source | |
| 0.1 | 10 | EPSS Probability is 0.00231, EPSS Percentile is 0.12881 |
Security Feature Bypass (1)Qualys: CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability A command injection flaw in Windows Shell may allow an unauthenticated attacker to bypass a security feature over a network. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, acknowledging its active exploitation. CISA urged users to patch the vulnerability before October 16, 2026.
Tenable: Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)
Tenable: CVE-2026-96951 | Windows Shell security feature bypass vulnerability
Tenable: CVE-2026-96951 is a security feature bypass vulnerability affecting Windows Shell. It received a CVSSv3 score of 8.8 and was rated as important. According to Microsoft, this vulnerability was exploited in the wild as a zero-day.
Rapid7: The Windows Shell is Microsoft’s term for the GUI interaction logic for the entire OS provided by explorer.exe and associated libraries and APIs, and for the second time this year, the Windows Shell is the site of an exploited-in-the-wild zero-day vulnerability. Today’s specimen is CVE-2026-96951. Once again, the immediate prize for an attacker is a Mark of the Web (MOTW) bypass. What this means is that Windows won’t provide the user with a dialog explaining that Windows protected their PC, because in this case, it didn’t. Exploitation requires that a user opens a specially crafted malicious file or visits an attacker-controlled site, so the evergreen advice about being careful what you click remains valid. Fans of vintage operating systems should note that Windows Server 2012 doesn’t receive a patch, although Server 2012 R2 does. The advisory acknowledges reporters from multiple organizations, although none from within Microsoft. The vulnerability also affected Microsoft’s Outlook.com cloud services, although Outlook.com was patched in a build dated several weeks ago.
ZDI: - CVE-2026-96951 - Windows Shell Security Feature Bypass Vulnerability. This is the lone bug listed as under active attack, and it’s certainly a type of bug we’ve seen before. Going back to 2024, attackers have used multiple methods to avoid Mark of the Web (MotW) protections. This time, it’s Shell instead of SmartScreen, but the result is the same. As with any bug under active attack, test and deploy this patch quickly
Remote Code Execution (1)Elevation of Privilege (1)Remote Code Execution (315)ZDI: Windows DHCP Client and Server: There are 18 CVEs in Windows DHCP: 16 in DHCP Server and 2 in DHCP Client. We’ve already discussed the wormable ones, so I won’t rehash them here. Of the remaining 12 DHCP bugs, two are Critical. CVE-2026-88171 is an unauthenticated double free in DHCP Server that just misses being wormable, and CVE-2026-70250 is a DHCP Client use-after-free that requires an adjacent network. The rest are a mix of authenticated RCEs, two unauthenticated DoS bugs, two EoPs and two security feature bypasses, none rated above “Exploitation Less Likely” by Microsoft.
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
ZDI: DNS and DNS Server Bugs: There are 58 CVEs in Windows DNS and DNS Server: 52 tagged DNS Server (role) and six tagged Windows DNS. All 58 are Important, including CVE-2026-96113, an RCE scored at CVSS 9.8. There are still a few where the advisories describe the impact as unauthorized attackers executing code over the network, but without the exact wormable wording. Four of these are untrusted pointer dereferences and one is type confusion. The majority of these bugs (31) are info disclosures. Five are tampering bugs and one is a security feature bypass, but all of these require authentication.
Tenable: CVE-2026-70229 | Windows Active Directory Domain Services remote code execution vulnerability
Tenable: CVE-2026-70229 is an RCE vulnerability affecting Windows Active Directory Domain Services (AD DS). It received a CVSSv3 score of 8.1 and is rated as critical. Microsoft assesses this vulnerability as “Exploitation More Likely” according to Microsoft’s Exploitability Index.
Tenable: CVE-2026-70571 | Microsoft Exchange Server remote code execution vulnerability
Tenable: CVE-2026-70571 is a remote code execution vulnerability affecting Microsoft Exchange Server. It received a CVSSv3 score of 8.1 and is rated as critical. It was assessed as “Exploitation More Likely.”
ZDI: - CVE-2026-70571 - Microsoft Exchange Server Remote Code Execution Vulnerability. Technically speaking, this is a wormable bug in Exchange Server. However, I wouldn’t count on that happening. Microsoft states, “Exploitation requires an attacker to have a deep understanding of the target environment and is not guaranteed to succeed.” While the wording is obtuse, it generally means the likelihood of stars aligning to exploit the Exchange Server through this bug is minuscule.
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
ZDI: Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs.
ZDI: Windows DHCP Client and Server: There are 18 CVEs in Windows DHCP: 16 in DHCP Server and 2 in DHCP Client. We’ve already discussed the wormable ones, so I won’t rehash them here. Of the remaining 12 DHCP bugs, two are Critical. CVE-2026-88171 is an unauthenticated double free in DHCP Server that just misses being wormable, and CVE-2026-70250 is a DHCP Client use-after-free that requires an adjacent network. The rest are a mix of authenticated RCEs, two unauthenticated DoS bugs, two EoPs and two security feature bypasses, none rated above “Exploitation Less Likely” by Microsoft.
Rapid7: The sheer volume of vulnerabilities in recent Patch Tuesday releases can easily include several examples of potentially concerning vulnerabilities, each of which might have been more remarkable in its own right back when volumes were lower. Today, Microsoft has published five separate remote code execution vulnerabilities in Outlook where the preview pane is a vector, meaning that simply scrolling past an email in the Outlook reading pane would be sufficient to trigger exploitation. Worse still, Outlook might helpfully display the preview without any user interaction at all. All five of CVE-2026-70242, CVE-2026-97749, CVE-2026-97016, CVE-2026-88156, and CVE-2026-70291 receive fixes in the same patches. No-interaction Outlook preview pane vulnerabilities can sometimes feature prominently in state-backed actor campaigns, with CVE-2023-23397 as a prominent example in this category.
ZDI: SharePoint Server: Besides the Critical bug already mentioned, SharePoint has 34 other CVEs this month: 13 EoP, seven spoofing, seven RCE, six info disclosure and one tampering bug. All of the rest are Important. The seven RCEs all lean on authentication, but the bar is low. CVE-2026-85900 needs only Site Member permissions, and CVE-2026-88155, 88163 and 88166 need Manage List. CVE-2026-105013 and 70267 don’t say what level an attacker needs, so assume these default permissions only. The bug classes read more like a web-app pentest report than memory corruption: seven of the EoPs are authorization and access-control failures, three more are SSRF, and the spoofing bugs are mostly stored script. The one other unauthenticated bug is CVE-2026-97783, a spoofing flaw at CVSS 8.1. Given SharePoint’s recent history of “Exploitation Less Likely” turning into “in the wild,” don’t skip the RCEs just because they need credentials.
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
ZDI: Office-Related Bugs: I’ve already mentioned a couple of these above, but that still leaves a lot to cover. Counting Skype for Business and Bookings, there are 139 Office-related CVEs (including those mentioned above): 100 RCE, 29 info disclosure, nine EoP and one security feature bypass. Thirty-five are Critical and 104 are Important. I would focus on Outlook, with five Critical RCEs at CVSS 9.8. All five say simply viewing the email in the Reading Pane triggers the bug, with no click and no authentication. That makes them the closest thing to wormable in Office. Then there are the 69 Excel bugs; 51 RCEs and 18 info leaks. Nineteen of these RCEs are Critical at 8.8 (for example CVE-2026-100209). Most of these are the open-and-own variety. Four Excel bugs do list the Preview Pane: CVE-2026-70254 and 88145 (RCE, 8.8), and 88154 and 88175 (info leaks). Word adds 22 more. Most of the RCEs and info leaks name the Preview Pane as a vector. The rest are an EoP and a security feature bypass. There are 12 Access RCEs and three Critical Visio RCEs that are open-and-own. Access also has one info. PowerPoint rounds things out with three Critical RCEs, all of which name the Preview Pane. The other four are info leaks.
ZDI: - CVE-2026-65674 – Microsoft SQL Server Remote Code Execution Vulnerability. Like SharePoint, there’s lots to choose from in the SQL component. This one is the highest-scoring CVSS at 8.8 and has the best exploitability rating of any SQL Server bug this month. It’s a deserialization of untrusted data. An authenticated attacker connects to an affected SQL Server and sends a specially crafted request to run code on the server. No user interaction is needed. Definitely check this on any SQL Server directly connected to the internet.
ZDI: SQL Server and Client: Beyond the RCE already mentioned, SQL Server and its client tools have 23 other CVEs this month: nine RCE, seven EoP, four info disclosure, and three DoS. All are Important. The pattern here is authenticated memory corruption: heap and stack overflows, use-after-frees, and out-of-bounds reads. The template is simple: log in, submit a crafted request, corrupt memory, run code on the server. That’s why the CVSS 8.8 bugs here are less scary than they score; an attacker already needs database credentials, but it’s also textbook post-compromise lateral movement. The odd one out is CVE-2026-103572, which isn’t a database bug at all. It’s in SQL Server Management Studio, where a prompt injection through Copilot can turn into code execution. As AI features creep (sneak?) into admin tools, I expect to see more of this.
ZDI: Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads.
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
Elevation of Privilege (672)ZDI: Windows Kernel and the Win32k Subsystem: Alright – don’t @me. I know the difference between kernel and Win32k components, but they’re similar enough that I group them together. There are 94 CVEs in the Windows Kernel and Win32K components: Windows Kernel (46), Win32 Kernel Subsystem (36), Win32K (8), Win32K GRFX (3) and Win32K ICOMP (1). By type, 71 are elevation of privilege, 20 are info disclosure, 2 are DoS and 1 is a security feature bypass. Most of these just lead to SYSTEM access as expected. Of the info disclosure bugs, these primarily leak random portions of memory. The only real outlier here is CVE-2026-70111, whose advisory says the attacker elevates privileges “over a network.” That’s unusual for a kernel EoP.
ZDI: Windows NTFS: NTFS has 26 CVEs this month: 16 EoP, six info disclosure and four RCE. All are Important, none is above CVSS 7.8, and 21 of the 26 are local. The EoPs all lead to SYSTEM, and five of them (CVE-2026-96217, 96916, 96918, 96928 and 96931) are sandbox escapes caused by reparse points created by sandboxed processes. That means a compromised browser or app sandbox could use them to break out. The four RCEs all require an authorized local attacker, so they’re closer to EoPs with extra steps than real remote bugs. Everything else is memory corruption: out-of-bounds reads lead, then use-after-frees and heap overflows.
ZDI: - CVE-2026-102866 – Microsoft Office SharePoint Elevation of Privilege Vulnerability. There are lots of SharePoint bugs this month, but this one stands out. It’s the only Critical-rated SharePoint CVE (CVSS 8.1), and the only one an unauthenticated attacker can exploit. It’s an improper cryptographic signature verification bug. An attacker who obtains a valid proof token for a targeted user could modify it, submit it to the server, and authenticate as that user. The only caveat is that the attacker has to obtain that token first, but there are multiple methods this could be achieved.
ZDI: Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs.
ZDI: Local Privilege Escalations: To say these bugs are prevalent is an understatement. However, of the 677 EoP bugs in the data, 606 (90%) lead to SYSTEM, administrator or root privileges. There are also a few integrity-level or sandbox escapes. There are 10 bugs where the attacker moves from low to medium integrity, and six where they escape a Low Integrity Level or AppContainer sandbox. There are seven bugs where the advisory says only “ELEVATED privileges,” or describes a cloud identity or data-access issue. There are nearly two dozen others where the attacker runs as another user or service account, creates or deletes files in a privileged context, or reaches Local Service. This includes CVE-2026-70190, which lets the attacker create, modify or delete files as SYSTEM but doesn’t give SYSTEM privileges. Frustratingly, there are 23 that have no “what privileges” FAQ at all, and some of these may be cloud fixes with no action needed. If I can be bothered to read them all, they should be bothered to write them all.
ZDI: Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads.
Security Feature Bypass (39)Qualys: CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability An untrusted search path flaw in the .NET Framework may allow an authenticated attacker to bypass a security feature locally.
Tenable: CVE-2026-108398 |.NET Framework security feature bypass vulnerability
Tenable: CVE-2026-108398 is a security feature bypass vulnerability affecting.NET Framework. It received a CVSSv3 score of 8.8 and is rated as important. It was publicly disclosed prior to a patch being available.
Rapid7: Microsoft is aware of some level of public disclosure of CVE-2026-108398, a .NET Framework security feature bypass. Exploitation requires an attacker with an existing foothold to register a malicious .NET assembly for loading by a protected process, bypassing Windows Defender Application Control (WDAC) enforcement. Microsoft rebranded WDAC as App Control for Business several years ago, so you may know it under its new name. The Microsoft Learn page for Application Control for Windows points out that “your organization's data is one of its most valuable assets... and threat actors want it”, and this is, of course, correct. The patch presumably removes an attacker-controlled location from the list of places .NET Framework searches for registered assemblies, which are typically contained within DLLs and executables. If any further indications were needed that vulnerability volumes are increasing industry-wide, this is only the second month that Microsoft has published vulnerabilities with six-digit CVE numbers, but these extra-large CVEs will seem unremarkable from now on.
ZDI: Two bugs in this release are listed as publicly known: CVE-2026-108398, a .NET Framework security feature bypass that could let an attacker evade Windows Defender Application Control (WDAC) enforcement, and CVE-2026-92707, a denial-of-service bug in MessagePack-CSharp that was released by a third party and is now included in Microsoft’s release. Neither is listed as under active attack. As always, we’ll start with the bug under active attack and move on from there.
ZDI: Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads.
Information Disclosure (252)ZDI: Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs.
Denial of Service (72)ZDI: Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs.
ZDI: Two bugs in this release are listed as publicly known: CVE-2026-108398, a .NET Framework security feature bypass that could let an attacker evade Windows Defender Application Control (WDAC) enforcement, and CVE-2026-92707, a denial-of-service bug in MessagePack-CSharp that was released by a third party and is now included in Microsoft’s release. Neither is listed as under active attack. As always, we’ll start with the bug under active attack and move on from there.
Spoofing (27)Tenable: CVE-2026-70279 | Microsoft Exchange Server spoofing vulnerability
Tenable: CVE-2026-70279 is a spoofing vulnerability affecting Microsoft Exchange Server. It received a CVSSv3 score of 9.3 and is rated as important. It was assessed as “Exploitation More Likely.” An attacker could exploit this vulnerability by convincing a target through social engineering to click on a malicious link. Successful exploitation against a target with administrative privileges would allow an attacker to access or modify organizational data.
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
ZDI: A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items.
ZDI: SharePoint Server: Besides the Critical bug already mentioned, SharePoint has 34 other CVEs this month: 13 EoP, seven spoofing, seven RCE, six info disclosure and one tampering bug. All of the rest are Important. The seven RCEs all lean on authentication, but the bar is low. CVE-2026-85900 needs only Site Member permissions, and CVE-2026-88155, 88163 and 88166 need Manage List. CVE-2026-105013 and 70267 don’t say what level an attacker needs, so assume these default permissions only. The bug classes read more like a web-app pentest report than memory corruption: seven of the EoPs are authorization and access-control failures, three more are SSRF, and the spoofing bugs are mostly stored script. The one other unauthenticated bug is CVE-2026-97783, a spoofing flaw at CVSS 8.1. Given SharePoint’s recent history of “Exploitation Less Likely” turning into “in the wild,” don’t skip the RCEs just because they need credentials.
Tampering (29)