Microsoft is publishing 421 vulnerabilities on , a high-severity remote code execution in Microsoft SharePoint. , Rapid7 has now published a , the first vulnerability in the chain.
AFD for Winsock: zero-day EoP
Rapid7 has previously is just what the doctor ordered, if the doctor is based in Pyongyang and wants to steal your cryptocurrency. Microsoft credits CVE-2026-68820 to researchers at Check Point (misspelled “Checkpoint” on the advisory). CVE-2026-68820 isn’t yet listed on CISA KEV, but it will be soon.
What’s the opposite of coordinated disclosure?
This month’s entry in the ongoing saga of Microsoft vs. a pseudonymous security researcher with a clear dislike of Microsoft comes in the form of .
Patch Tuesday watchers will have been wondering whether Nightmare Eclipse would continue the pattern of the past few months by dropping yet another zero-day vuln late on Patch Tuesday to maximize friction and inconvenience for Microsoft. Wonder no more, because the new entry on this growing list of headaches is ShieldBreak. Nightmare Eclipse describes ShieldBreak as a full patch bypass for RoguePlanet, a previous entry in the series which Microsoft patched as describes a tampering vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys), where abuse of a flaw in the vulnerable driver presumably allows an unauthorized attacker to overwrite certain files. Since this might include an action taken within a container leading to an unauthorized impact outside the container, it might be surprising that the advisory claims no scope change. Presumably Microsoft is leaning on the fact that the vulnerability is within a driver which operates entirely within a single security authority, i.e. kernel space, so there is only one impacted component and no scope change according to the CVSS v3 spec. Still, the low CVSS v3 base score of 5.5 probably isn’t telling the whole story in this case.
Vulnerabilities classed as tampering are somewhat rare in the Microsoft corpus, making up just a few dozen of the thousands of unique vulnerabilities which isn’t mentioned in the Notable CVEs section of the new slimline Security Update Guide. Should it be? Perhaps, because Microsoft is aware of public disclosure in this case, but then again the categorization as tampering means that Microsoft is not currently aware of a path to a more severe impact such as elevation of privilege or code execution. The advisory acknowledges a pair of pseudonymous reporters, who also receive credit on at least 40 other advisories over the past few months, across a wide variety of Windows components and Microsoft Office, including 11 critical vulnerabilities.
Edge: update slowdown?
Typically, Microsoft patches a fair few browser vulnerabilities between the start of each month and that month’s Patch Tuesday, but not this month. Conspicuous by its absence at the time of Patch Tuesday publication today was Microsoft Edge, which receives regular batches of patches as a downstream consumer of Google Chromium. At the moment of Patch Tuesday publication, the desktop incarnations of Edge . Anyone responsible for assets with Microsoft Edge installed will be relieved to know that patches for Edge eventually emerged a few hours later on Patch Tuesday itself, but five days is still a longer unpatched gap between Chrome and Edge than has been typical in the past.
Microsoft lifecycle update
August is typically a quieter month for Microsoft product lifecycle transitions, and this year continues that pattern. The next lifecycle changes with broad impact occur on October 14, 2026, when moves to extended support, with free critical security updates continuing, but no further feature development. At the same time, the final curtain falls for with the expiry of the third and final year of cash-for-updates Extended Security Update (ESU) program for these aging workhorses. , with no ESU available in that case. Also in October, Exchange Server 2016 and 2019 will join the “no ESU” club, after two previous six-month reprieves. Presumably, Microsoft really means it this time.
Summary charts
Summary tables
Vulnerabilities by Product Family
Apps vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
Azure CycleCloud Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 | |
Azure Monitor Agent Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 | |
MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Exploitation Less Likely | No | 7.9 | |
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 5.4 | |
CVE-2026-19138 Heap buffer overflow in CrashReporting | n/a | No | ||
CVE-2026-19140 Use after free in GPU | n/a | No | ||
CVE-2026-19144 Use after free in HTML | n/a | No | ||
CVE-2026-19146 Uninitialized Use in GPU | n/a | No | ||
CVE-2026-19148 Out of bounds write in GPU | n/a | No | ||
CVE-2026-19150 Inappropriate implementation in V8 | n/a | No | ||
CVE-2026-19152 Inappropriate implementation in Navigation | n/a | No | ||
CVE-2026-19155 Use after free in Payments | n/a | No | ||
CVE-2026-19157 Out of bounds write in ANGLE | n/a | No | ||
CVE-2026-19159 Use after free in Views | n/a | No | ||
CVE-2026-19161 Uninitialized Use in Skia | n/a | No | ||
CVE-2026-19163 Use after free in Media | n/a | No | ||
CVE-2026-19165 Use after free in Extensions | n/a | No | ||
CVE-2026-19167 Integer overflow in GPU | n/a | No | ||
CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks | n/a | No | ||
CVE-2026-19171 Use after free in Media | n/a | No | ||
CVE-2026-19173 Out of bounds write in Skia | n/a | No | ||
CVE-2026-19175 Use after free in Payments | n/a | No | ||
CVE-2026-19177 Insufficient validation of untrusted input in UI | n/a | No |
Developer Tools vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
.NET Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 | |
.NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
.NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
.NET Framework Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
.NET Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.9 | |
.NET Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 5.9 | |
GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Microsoft PowerShell Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.8 | |
PowerShell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 | |
Visual Studio Code Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 | |
Visual Studio Code Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Visual Studio Code Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Visual Studio Code Security Feature Bypass Vulnerability | Exploitation More Likely | No | 7.8 | |
AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 | |
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Digest Authentication Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 | |
Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 | |
Microsoft Exchange Server Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 | |
Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 | |
Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 | |
Microsoft Windows Search Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Exploitation Less Likely | No | 7.9 | |
Remote Access API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 | |
Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 | |
Remote Procedure Call Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 | |
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 | |
Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 | |
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.0 | |
Windows Backup Engine Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Defender Firewall Service Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 | |
Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 | |
Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 | |
Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 | |
Windows DHCP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 | |
Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 | |
Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 | |
Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows GDI Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows GDI+ Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Hello Tampering Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Imaging Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 | |
Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 | |
Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Key Guard Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 | |
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Narrator Braille Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Network File System Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 | |
Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 | |
Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows Projected File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 | |
Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Schannel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.3 | |
Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 | |
Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 | |
Windows TCP/IP Denial of Service Vulnerability | Exploitation More Likely | No | 7.5 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Work Folder Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 | |
Microsoft Dynamics Business Central Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
Microsoft Office vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Access Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 | |
Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 | |
Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Office Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 | |
Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Less Likely | No | 8.0 | |
Microsoft Office Word Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Microsoft Office Word Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft Outlook Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 | |
Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.3 | |
Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 | |
Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 | |
Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 | |
Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 | |
Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 | |
Microsoft SharePoint Server Spoofing Vulnerability | N/A | No | 4.6 | |
Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 | |
Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 | |
Microsoft Teams for Android and iOS Spoofing Vulnerability | Exploitation Less Likely | No | 8.8 | |
Microsoft Teams Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 | |
Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
Server Software vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 | |
Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 | |
Microsoft Exchange Server Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 | |
Power BI Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
System Center vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
Active Directory Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.3 | |
AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 | |
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Microsoft COM for Windows Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.8 | |
Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 | |
Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 | |
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | Exploitation Less Likely | No | 5.9 | |
Remote Access API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 | |
Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 | |
Remote Procedure Call Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 | |
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 | |
Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 | |
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 | |
Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows Defender Firewall Service Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 | |
Windows DHCP Client Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 | |
Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 | |
Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 | |
Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 | |
Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 | |
Windows Display Enhancement Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 | |
Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 | |
Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 | |
Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.6 | |
Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows GDI Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows GDI+ Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Hello Tampering Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Hyper-V Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.0 | |
Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Installer Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 | |
Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 | |
Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 | |
Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 | |
Windows Key Guard Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 | |
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Management Services Denial of Service Vulnerability | Exploitation Less Likely | No | 5.5 | |
Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Network Address Translation (NAT) Spoofing Vulnerability | Exploitation Less Likely | No | 8.3 | |
Windows Network File System Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 | |
Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 | |
Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 | |
Windows Projected File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 | |
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 | |
Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Schannel Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 | |
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 | |
Windows Shell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 | |
Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 | |
Windows Storage Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows TCP/IP Denial of Service Vulnerability | Exploitation More Likely | No | 7.5 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 | |
Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 | |
Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 | |
Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 | |
Windows Wired AutoConfig Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 | |
Winlogon Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
Zero-Day Vulnerabilities: Known Exploited
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Exploitation Unlikely | Yes | 5.5 | |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Exploitation More Likely | Yes | 7.8 |
SOCIAL SHARE CARD GENERATOR