Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days
Today is Microsoft’s July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two zero-day vulnerabilities exfploited in attacks and one publicly disclosed.
Patch Tuesday addresses 59 “Critical” vulnerabilities, 48 of which are remote code execution, 9 are elevation of privilege, 1 is a security bypass, and 1 is a spoofing.
The approximate number of bugs in each vulnerability category is listed below:
- 254 Elevation of Privilege Vulnerabilities
- 17 Security Feature Bypass Vulnerabilities
- 145 Remote Code Execution Vulnerabilities
- 102 Information Disclosure Vulnerabilities
- 35 Denial of Service Vulnerabilities
- 16 Spoofing Vulnerabilities
When GeekFeed reports on Patch Tuesday security updates, we only count those released by Microsoft today.
Therefore, the number of flaws does not include flaws in Mariner, Azure OpenAI, Azure Synapse, M365 Copilot, Microsoft Exchange Online, Microsoft Edge for Android, and Microsoft Entra Provisioning Service that were fixed by Microsoft earlier this month.
There were also a massive 468 Microsoft Edge/Chromium flaws that were fixed by Google this month, which were excluded from this Patch Tuesday roundup. As part of last month’s June Patch Tuesday, Google fixed 360 flaws that were later ported to Microsoft Edge.
Last week, Microsoft warned that there would be an increase in Patch Tuesday security updates as it has begun to use an AI-powered vulnerability discovery system to identify more security flaws across its Windows codebase before attackers can exploit them.
To learn more about the non-security updates released today, you can review our dedicated articles on the Windows 11 KB5101650 & KB5099414 cumulative updates and the Windows 10 KB5099539 extended security update.
Microsoft patches 3 zero-days
This month’s Patch Tuesday fixes three zero-day vulnerabilities, with two exploited in attacks and one publicly disclosed.
Microsoft classifies a zero-day flaw as publicly disclosed or actively exploited while no official fix is available.
The two actively exploited zero-days addressed during this month’s Patch Tuesday are:
CVE-2026-56155 – Active Directory Federation Services Elevation of Privilege Vulnerability
Microsoft has patched an actively exploited vulnerability in Active Directory Federation Services that grants administrative privileges.
“Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally,” warns Microsoft.
Microsoft credited the flaw to Jeremy Kingston and Scott Clark of Microsoft Detection and Response Team (DART), Microsoft’s incident response unit, indicating it was likely uncovered while investigating active attacks.
Microsoft has not disclosed any details as to how the flaw was exploited in attacks.
CVE-2026-56164 – Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft has patched an actively exploited flaw in Microsoft SharePoint Server that allows a remote attacker to gain elevated privileges.
“Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network,” explains Microsoft.
Microsoft says that enabling the Antimalware Scan Interface (AMSI) on the server and setting the Request Body Scan mode to Full can help mitigate this flaw.
No details have been released as to how this flaw was exploited in attacks.
Microsoft credited the flaw to Jayson Frost with Mandiant Incident Response, Genwei Jiang with Google Cloud, FLARE OTF, and an anonymous researcher.
The publicly disclosed zero-day that was fixed is:
CVE-2026-50661 – Windows BitLocker Security Feature Bypass Vulnerability
Microsoft has patched a publicly disclosed Windows BitLocker bypass flaw that could allow attackers to gain access to encrypted data.
“A successful attacker could bypass the BitLocker Device Encryption feature on the system storage device. An attacker with physical access to the target could exploit this vulnerability to gain access to encrypted data,” explains Microsoft.
Microsoft attributed the flaw to an anonymous researcher.
Recent updates from other companies
Other vendors who released updates or advisories in May 2026 include:
- Adobe recently patched seven max-severity ColdFusion and Campaign flaws, including the ColdFusion flaw CVE-2026-48282, which was later exploited in attacks.
- BeyondTrust released security updates for two critical authentication bypass flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software.
- Cisco released security updates for numerous products, including Cisco Identity Services Engine, Catalyst Center, and ClamAV. Cisco also confirmed that CVE-2026-20230, fixed in June, was actively exploited in attacks.
- Fortinet released security updates for numerous flaws in FortiOS, FortiSandbox, FortiPam, FortiSandbox, FortiSASE, and FortiProxy.
- Gitea released a security update for a critical auth bypass in the Gitea Docker image.
- Ivanti released security updates for two vulnerabilities in Ivanti Xtraction.
- Linux kernel maintainers released a patch for the Januscape vulnerability, a flaw that allows attackers to escape a virtual machine and execute arbitrary code on the host.
- NVIDIA released security updates for NVIDIA Triton Inference Server and NVIDIA TensorRT-LLM.
- Progress Software released security updates for a high-severity path traversal zero-day vulnerability that led to the emergency shutdown of ShareFile Storage Zone Controllers last week.
- Ubiquiti released security updates for vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks.
- U-Boot maintainers introduced patches to fix new flaws that could enable stealthy firmware attacks.
- SAP released the July security updates, which include fixes for four critical flaws in NetWeaver, Commerce Cloud, and AppRouter.
- VMware released security updates for VMware Avi Load Balancer, which include authentication bypasses and remote code execution flaws.
- Zimbra released security updates for a critical XSS vulnerability affecting the Classic Web Client in the Zimbra Collaboration suite.
The July 2026 Patch Tuesday Security Updates
Below is the complete list of resolved vulnerabilities in the July 2026 Patch Tuesday updates, excluding flaws fixed before today.
| Tag | CVE ID | CVE Title | Severity |
|---|---|---|---|
| .NET | CVE-2026-50649 | .NET Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-50525 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-50528 | .NET Security Feature Bypass Vulnerability | Important |
| .NET | CVE-2026-47302 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-50659 | .NET Spoofing Vulnerability | Important |
| .NET | CVE-2026-50526 | .NET Tampering Vulnerability | Important |
| .NET | CVE-2026-47304 | .NET Security Feature Bypass Vulnerability | Important |
| .NET | CVE-2026-50651 | .NET Denial of Service Vulnerability | Important |
| .NET Core | CVE-2026-57108 | .NET Denial of Service Vulnerability | Important |
| .NET Framework | CVE-2026-50524 | .NET Framework Denial of Service Vulnerability | Important |
| .NET Framework | CVE-2026-50650 | .NET Framework Elevation of Privilege Vulnerability | Important |
| .NET Framework | CVE-2026-50527 | .NET Framework Denial of Service Vulnerability | Important |
| .NET Framework | CVE-2026-50646 | .NET Framework Remote Code Execution Vulnerability | Important |
| .NET Framework | CVE-2026-50648 | .NET Framework Denial of Service Vulnerability | Important |
| Active Directory Certificate Services (AD CS) | CVE-2026-54121 | Active Directory Certificate Services Elevation of Privilege Vulnerability | Critical |
| Active Directory Domain Services | CVE-2026-50366 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-49164 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Critical |
| Active Directory Domain Services | CVE-2026-49178 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-57976 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-50368 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-50304 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-50695 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-54983 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-58529 | Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-56155 | Active Directory Federation Services Elevation of Privilege Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-50647 | Active Directory Federation Server Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-50355 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-50411 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-50684 | Active Directory Federation Server Spoofing Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-50324 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important |
| Age of Empires II: Definitive Edition Game | CVE-2026-50663 | Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability | Important |
| ASP.NET Core | CVE-2026-45646 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-50506 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-56170 | ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-47300 | ASP.NET Core Elevation of Privilege Vulnerability | Important |
| ASP.NET Core | CVE-2026-47303 | ASP.NET Core Elevation of Privilege Vulnerability | Important |
| Azure Active Directory | CVE-2026-50653 | Azure Active Directory Denial of Service Vulnerability | Important |
| Azure Active Directory | CVE-2026-50652 | Azure Active Directory Denial of Service Vulnerability | Important |
| Azure CycleCloud | CVE-2026-57969 | Azure CycleCloud Elevation of Privilege Vulnerability | Important |
| Azure CycleCloud | CVE-2026-58279 | Azure CycleCloud Elevation of Privilege Vulnerability | Important |
| Azure Monitor Agent | CVE-2026-47632 | Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability | Important |
| Azure Spring Apps | CVE-2026-50338 | Azure Spring Apps Elevation of Privilege Vulnerability | Important |
| Code Integrity DLL (ci.dll) | CVE-2026-50491 | Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability | Important |
| Composite Image File System Driver | CVE-2026-50381 | Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability | Important |
| Content Delivery Manager | CVE-2026-50427 | Content Delivery Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-58634 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-50692 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-58633 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Extensible Storage Engine (ESENT) | CVE-2026-57088 | Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability | Important |
| Github Copilot | CVE-2026-50510 | GitHub Copilot Remote Code Execution Vulnerability | Important |
| GitHub Copilot and Visual Studio | CVE-2026-41109 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | Important |
| GitHub Copilot and Visual Studio Code | CVE-2026-47282 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Important |
| HTTP/2 | CVE-2026-49788 | HTTP/2 Denial of Service Vulnerability | Important |
| Microsoft 365 Copilot for iOS | CVE-2026-58617 | M365 Copilot for iOS Elevation of Privilege Vulnerability | Important |
| Microsoft Bing App for IOS | CVE-2026-58595 | Microsoft Bing App for IOS Spoofing Vulnerability | Important |
| Microsoft Copilot | CVE-2026-48561 | Microsoft Copilot Remote Code Execution Vulnerability | Critical |
| Microsoft Defender | CVE-2026-50658 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | Important |
| Microsoft Defender | CVE-2026-55012 | Microsoft Defender Remote Code Execution Vulnerability | Critical |
| Microsoft Defender | CVE-2026-50657 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | Important |
| Microsoft Defender | CVE-2026-55011 | Microsoft Defender Remote Code Execution Vulnerability | Critical |
| Microsoft Defender for Endpoint | CVE-2026-56178 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | Important |
| Microsoft Dynamics NAV | CVE-2026-55944 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability | Critical |
| Microsoft Exchange Server | CVE-2026-55006 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-55005 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-55008 | Microsoft Exchange Server Spoofing Vulnerability | Critical |
| Microsoft Exchange Server | CVE-2026-55009 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Fabric Data Warehouse | CVE-2026-56642 | Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-58609 | Windows Graphics Component Remote Code Execution Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-50483 | Windows Graphics Component Information Disclosure Vulnerability | Important |
| Microsoft Input Method Editor (IME) | CVE-2026-58534 | Windows Input Method Editor (IME) Elevation of Privilege Vulnerability | Important |
| Microsoft Install Service | CVE-2026-50343 | Microsoft Install Service Elevation of Privilege Vulnerability | Important |
| Microsoft NAT Helper Components (ipnathlp.dll) | CVE-2026-58537 | Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability | Important |
| Microsoft Office | CVE-2026-55047 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55028 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55026 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55027 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55129 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-55035 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55049 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-55045 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-55125 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-50301 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-50314 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-56193 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-47290 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-50467 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-55022 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-55023 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55017 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-55018 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-50665 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55140 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-55121 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-56192 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-56195 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55139 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55042 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-55056 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-55057 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55949 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55024 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-50408 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55947 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55898 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-58618 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-50678 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-54988 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55039 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-50675 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-47642 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-48580 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55899 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55948 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-54131 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55041 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55138 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55137 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55058 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55136 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55054 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55036 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55141 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55037 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55025 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55031 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55046 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55044 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55048 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55122 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55053 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55131 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-55029 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-56156 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office OneNote | CVE-2026-55133 | Microsoft OneNote Remote Code Execution Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-55120 | Microsoft PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office PowerPoint | CVE-2026-55043 | Microsoft PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office PowerPoint | CVE-2026-55123 | Microsoft PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-56157 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55126 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55051 | Microsoft SharePoint Server Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Moderate |
| Microsoft Office SharePoint | CVE-2026-55052 | Microsoft SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55135 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-54108 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55021 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55020 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-58277 | Microsoft SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55030 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-55034 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55019 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-55016 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55055 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55142 | Microsoft Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55130 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55128 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55032 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55038 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55127 | Microsoft Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-55033 | Microsoft Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-55124 | Microsoft Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55050 | Microsoft Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55134 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-55132 | Microsoft Word Remote Code Execution Vulnerability | Critical |
| Microsoft Printer Drivers | CVE-2026-49166 | Windows Print Configuration Elevation of Privilege Vulnerability | Important |
| Microsoft Printer Drivers | CVE-2026-55004 | Windows Print Configuration Elevation of Privilege Vulnerability | Important |
| Microsoft Surface | CVE-2026-48581 | Surface Broker SDMA Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2026-50476 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows App Store | CVE-2026-49165 | Microsoft Windows App Store Information Disclosure Vulnerability | Important |
| Microsoft Windows App Store | CVE-2026-49784 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Important |
| Microsoft Windows App Store | CVE-2026-50356 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Important |
| Microsoft Windows App Store | CVE-2026-42900 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Codecs Library | CVE-2026-57083 | Windows Media Photo Codec Information Disclosure Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-56189 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Media Foundation | CVE-2026-57087 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Media Foundation | CVE-2026-57094 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Media Foundation | CVE-2026-57090 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Media Foundation | CVE-2026-58610 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-54993 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-50373 | Windows Search Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-50679 | Windows Search Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Speech | CVE-2026-49171 | Windows Speech Runtime Elevation of Privilege Vulnerability | Important |
| Microsoft XML | CVE-2026-57097 | Microsoft XML Security Feature Bypass Vulnerability | Important |
| Microsoft XML Core Services | CVE-2026-50359 | Microsoft XML Core Services Elevation of Privilege Vulnerability | Important |
| Minecraft Bedrock Dedicated Server | CVE-2026-55010 | Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability | Critical |
| Outlook Copilot | CVE-2026-55145 | Outlook Copilot Tampering Vulnerability | Moderate |
| Power BI | CVE-2026-58647 | Microsoft PowerBI Report Server Spoofing Vulnerability | Important |
| Quality Windows Audio/Video Experience (QWAVE) service | CVE-2026-54989 | Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability | Important |
| Reliable Multicast Transport Driver (RMCAST) | CVE-2026-54995 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical |
| Reliable Multicast Transport Driver (RMCAST) | CVE-2026-54982 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical |
| Remote Desktop Client | CVE-2026-50474 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| Remote Desktop Client | CVE-2026-54990 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-50330 | Windows Remote Desktop Client Elevation of Privilege Vulnerability | Important |
| Remote Desktop Client | CVE-2026-50504 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-50426 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-49169 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| RPC Runtime | CVE-2026-50346 | Netlogon RPC Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-54118 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical |
| SQL Server | CVE-2026-47296 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-54116 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-47295 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-55002 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-50468 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-54117 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical |
| SQL Server ODBC driver | CVE-2026-42990 | SQL Server ODBC driver Elevation of Privilege Vulnerability | Important |
| Universal Plug and Play (upnp.dll) | CVE-2026-49180 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | Important |
| Universal Plug and Play (upnp.dll) | CVE-2026-58547 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | Important |
| Universal Plug and Play (upnp.dll) | CVE-2026-50455 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | Important |
| Virtual Hard Disk (VHD) Miniport Driver | CVE-2026-58601 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important |
| Visual Studio | CVE-2026-47305 | Visual Studio Remote Code Execution Vulnerability | Important |
| Visual Studio Code | CVE-2026-50520 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Visual Studio Code | CVE-2026-45496 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-57102 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-57101 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Window PC Manager | CVE-2026-50438 | Microsoft PC Manager Elevation of Privilege Vulnerability | Important |
| Window PC Manager | CVE-2026-58636 | Microsoft PC Manager Elevation of Privilege Vulnerability | Important |
| Windows Active Directory | CVE-2026-55001 | Active Directory Domain Services Elevation of Privilege Vulnerability | Important |
| Windows Active Directory | CVE-2026-50682 | Active Directory Denial of Service Vulnerability | Important |
| Windows Active Directory | CVE-2026-54119 | Windows Active Directory Denial of Service Vulnerability | Important |
| Windows Active Directory | CVE-2026-54115 | Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability | Important |
| Windows Admin Center | CVE-2026-57107 | Windows Admin Center Elevation of Privilege Vulnerability | Important |
| Windows Admin Center | CVE-2026-58631 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Important |
| Windows Admin Center | CVE-2026-56169 | Windows Admin Center Elevation of Privilege Vulnerability | Important |
| Windows Admin Center | CVE-2026-56185 | Windows Admin Center Information Disclosure Vulnerability | Important |
| Windows Admin Center | CVE-2026-56196 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Important |
| Windows Admin Center | CVE-2026-56197 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-57093 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-50312 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-34346 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-50462 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows App Installer | CVE-2026-48571 | Windows App Package Installer Elevation of Privilege Vulnerability | Important |
| Windows App Installer | CVE-2026-48572 | Windows App Package Installer Elevation of Privilege Vulnerability | Important |
| Windows App Installer | CVE-2026-50400 | Windows App Package Installer Elevation of Privilege Vulnerability | Important |
| Windows Application Model | CVE-2026-50331 | Windows Application Model Core API Elevation of Privilege Vulnerability | Important |
| Windows AppX Deployment Service | CVE-2026-49803 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | Important |
| Windows Audio Compression Manager (ACM) | CVE-2026-50351 | Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability | Important |
| Windows Audio Service | CVE-2026-34328 | Windows Audio Service Information Disclosure Vulnerability | Important |
| Windows Audio Service | CVE-2026-50440 | Windows Audio Service Elevation of Privilege Vulnerability | Important |
| Windows Backup Engine | CVE-2026-50406 | Windows Backup Engine Elevation of Privilege Vulnerability | Important |
| Windows BitLocker | CVE-2026-50661 | Windows BitLocker Security Feature Bypass Vulnerability | Important |
| Windows Bluetooth Port Driver | CVE-2026-42975 | Windows Bluetooth Port Driver Remote Code Execution | Important |
| Windows Bluetooth Service | CVE-2026-58538 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important |
| Windows Boot Loader | CVE-2026-58638 | Windows Boot Loader Security Feature Bypass Vulnerability | Important |
| Windows Brokering File System | CVE-2026-50466 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important |
| Windows Brokering File System | CVE-2026-49162 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important |
| Windows Brokering File System | CVE-2026-50305 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important |
| Windows Brokering File System | CVE-2026-50361 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important |
| Windows Brokering File System | CVE-2026-50458 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important |
| Windows Client-Side Caching (CSC) Service | CVE-2026-58637 | Windows Client-Side Caching Elevation of Privilege Vulnerability | Important |
| Windows Clip Service | CVE-2026-50384 | Windows Clip Service Elevation of Privilege Vulnerability | Important |
| Windows Clipboard Server | CVE-2026-50689 | Windows Clipboard Server Elevation of Privilege Vulnerability | Important |
| Windows Clipboard Server | CVE-2026-49183 | Windows Clipboard Server Elevation of Privilege Vulnerability | Important |
| Windows Clipboard User Service | CVE-2026-50488 | Clipboard User Service Elevation of Privilege Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-50374 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-50401 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-58613 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-58536 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Common Log File System Driver | CVE-2026-50697 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Windows Connected User Experiences and Telemetry | CVE-2026-50421 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-50428 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | Important |
| Windows CryptoAPI | CVE-2026-55144 | Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability | Important |
| Windows Cryptographic Services | CVE-2026-50681 | Windows Secure Channel Information Disclosure Vulnerability | Important |
| Windows Cryptographic Services | CVE-2026-44806 | Windows Secure Channel Denial of Service Vulnerability | Important |
| Windows Cryptographic Services | CVE-2026-50302 | Windows Cryptographic Services Security Feature Bypass Vulnerability | Important |
| Windows Cryptographic Services | CVE-2026-50352 | Windows Cryptographic Services Information Disclosure Vulnerability | Important |
| Windows Data.dll | CVE-2026-50347 | Windows Data.dll Remote Code Execution Vulnerability | Important |
| Windows Devices Human Interface | CVE-2026-50310 | Windows Human Interface Device Information Disclosure Vulnerability | Important |
| Windows DHCP Client | CVE-2026-54128 | Windows DHCP Client Remote Code Execution Vulnerability | Critical |
| Windows DHCP Client | CVE-2026-49181 | Windows DHCP Client Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-50518 | Windows DHCP Server Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-50370 | DHCP Server Service Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-50683 | Windows DHCP Client Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-50685 | Windows DHCP Server Remote Code Execution Vulnerability | Important |
| Windows DHCP Server | CVE-2026-58627 | Windows DHCP Server Denial of Service Vulnerability | Important |
| Windows DHCP Server | CVE-2026-56159 | DHCP Server Service Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-48564 | DHCP Server Service Remote Code Execution Vulnerability | Critical |
| Windows DirectX | CVE-2026-50353 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows DirectX | CVE-2026-50382 | DirectX Graphics Kernel Remote Code Execution Vulnerability | Critical |
| Windows DirectX | CVE-2026-49807 | Windows DirectX Information Disclosure Vulnerability | Important |
| Windows DirectX | CVE-2026-58629 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows DirectX | CVE-2026-50375 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-50465 | Windows DNS Client Tampering Vulnerability | Important |
| Windows DNS | CVE-2026-50487 | Windows DNS Client Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-50495 | DNS Client Tampering Vulnerability | Important |
| Windows DNS | CVE-2026-49174 | DNS Client Tampering Vulnerability | Important |
| Windows DNS | CVE-2026-50295 | Windows Zero Trust DNS Security Feature Bypass Vulnerability | Important |
| Windows DNS | CVE-2026-49175 | Windows DNS Client Elevation of Privilege Vulnerability | Important |
| Windows Domain Controller | CVE-2026-50424 | Windows Domain Controller Denial of Service Vulnerability | Important |
| Windows DWM | CVE-2026-58541 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-50437 | Windows DWM Core Library Information Disclosure Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-50502 | Windows Event Logging Service Remote Code Execution Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-34348 | Windows Event Logging Service Information Disclosure Vulnerability | Important |
| Windows File Explorer | CVE-2026-33842 | Windows File Explorer Information Disclosure Vulnerability | Important |
| Windows File Explorer | CVE-2026-50389 | Windows File Explorer Information Disclosure Vulnerability | Important |
| Windows File Explorer | CVE-2026-57084 | Windows File Explorer Information Disclosure Vulnerability | Important |
| Windows File Explorer | CVE-2026-41087 | Windows File Explorer Information Disclosure Vulnerability | Important |
| Windows File Explorer | CVE-2026-50442 | Windows File Explorer Information Disclosure Vulnerability | Important |
| Windows File Explorer | CVE-2026-50456 | Windows File Explorer Information Disclosure Vulnerability | Important |
| Windows File Explorer | CVE-2026-50473 | Windows File Explorer Information Disclosure Vulnerability | Important |
| Windows File Explorer | CVE-2026-40422 | Windows File Explorer Information Disclosure Vulnerability | Important |
| Windows File History Service | CVE-2026-57091 | Windows File History Service Elevation of Privilege Vulnerability | Important |
| Windows Filtering Platform (WFP) | CVE-2026-50405 | Windows Filtering Platform Elevation of Privilege Vulnerability | Important |
| Windows FTP Service | CVE-2026-49172 | Windows FTP Service Remote Code Execution Vulnerability | Important |
| Windows GDI | CVE-2026-50387 | Windows GDI Elevation of Privilege Vulnerability | Important |
| Windows GDI+ | CVE-2026-49796 | Windows GDI+ Remote Code Execution Vulnerability | Critical |
| Windows GDI+ | CVE-2026-54122 | Windows GDI+ Remote Code Execution Vulnerability | Important |
| Windows GDI+ | CVE-2026-50380 | Windows GDI+ Remote Code Execution Vulnerability | Critical |
| Windows Graphics Kernel | CVE-2026-50296 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Graphics Kernel | CVE-2026-50493 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Group Policy | CVE-2026-50391 | Windows Group Policy Elevation of Privilege Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-50420 | HTTP.sys Information Disclosure Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-49787 | HTTP.sys Denial of Service Vulnerability | Important |
| Windows Hyper-V | CVE-2026-50485 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Windows Hyper-V | CVE-2026-54129 | Windows Hyper-V Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2026-50680 | Windows Hyper-V Elevation of Privilege Vulnerability | Critical |
| Windows Hyper-V | CVE-2026-54127 | Windows Hyper-V Elevation of Privilege Vulnerability | Critical |
| Windows Image Acquisition | CVE-2026-50315 | Windows Image Acquisition Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-50490 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-58540 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Internal System User Profile | CVE-2026-50425 | Windows Internal System User Profile Elevation of Privilege Vulnerability | Important |
| Windows Internal Task Bar | CVE-2026-50293 | Windows Internal Task Bar Elevation of Privilege Vulnerability | Important |
| Windows Internet Key Exchange (IKE) Protocol | CVE-2026-50696 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability | Important |
| Windows Kernel | CVE-2026-50688 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-58545 | Windows Kernel Security Feature Bypass Vulnerability | Important |
| Windows Kernel | CVE-2026-56644 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-56643 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50377 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50329 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-49173 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50475 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-50463 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-50354 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50419 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-50429 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-50423 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50316 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-50687 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50294 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-50399 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50390 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50673 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50436 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50397 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-58532 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-49798 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-54132 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-49795 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-58614 | Windows Kernel Security Feature Bypass Vulnerability | Important |
| Windows Kernel | CVE-2026-49167 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50478 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50332 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50670 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50459 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50477 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-50300 | Windows DWM Core Library Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-50484 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-49808 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel Mode Driver | CVE-2026-58602 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-50393 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-50396 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important |
| Windows Key Guard | CVE-2026-50378 | Windows Key Guard Elevation of Privilege Vulnerability | Important |
| Windows Key Guard | CVE-2026-50303 | Windows Key Guard Security Feature Bypass Vulnerability | Important |
| Windows Local Security Authority Subsystem Service (LSASS) | CVE-2026-40378 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Important |
| Windows Local Security Authority Subsystem Service (LSASS) | CVE-2026-49799 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Important |
| Windows LUAFV | CVE-2026-50371 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Management Services | CVE-2026-58544 | Windows Management Services Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-34349 | Windows Media Information Disclosure Vulnerability | Important |
| Windows Media | CVE-2026-50379 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-58542 | Windows Media Remote Code Execution Vulnerability | Critical |
| Windows Media | CVE-2026-50677 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-50358 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-50676 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-50327 | Windows Media Remote Code Execution Vulnerability | Critical |
| Windows Media | CVE-2026-50404 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-50655 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical |
| Windows Media | CVE-2026-50415 | Windows Media Information Disclosure Vulnerability | Important |
| Windows Media | CVE-2026-50414 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-50433 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-50394 | Windows Media Information Disclosure Vulnerability | Important |
| Windows Media | CVE-2026-50336 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-50398 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Message Queuing | CVE-2026-50447 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Important |
| Windows Message Queuing | CVE-2026-50505 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Important |
| Windows Message Queuing Queue Manager | CVE-2026-50439 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | Important |
| Windows Message Queuing Queue Manager | CVE-2026-54992 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | Critical |
| Windows MIDI Service Module | CVE-2026-56183 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows MIDI Service Module | CVE-2026-50342 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows MIDI Service Module | CVE-2026-56187 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows Narrator Braille | CVE-2026-58635 | Windows Narrator Braille Elevation of Privilege Vulnerability | Important |
| Windows Netlogon | CVE-2026-50500 | Windows Netlogon Elevation of Privilege Vulnerability | Important |
| Windows Network Address Translation (NAT) | CVE-2026-56181 | Windows Network Address Translation (NAT) Spoofing Vulnerability | Moderate |
| Windows Network File System | CVE-2026-56650 | Windows Network File System Elevation of Privilege Vulnerability | Important |
| Windows Network File System | CVE-2026-56648 | Windows NFS Server Elevation of Privilege Vulnerability | Important |
| Windows Network File System | CVE-2026-56194 | Windows NFS Server Elevation of Privilege Vulnerability | Important |
| Windows Network File System | CVE-2026-56649 | Windows Network File System Remote Code Execution Vulnerability | Important |
| Windows Network Policy Server SNMP | CVE-2026-50496 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | Important |
| Windows Network Policy Server SNMP | CVE-2026-50470 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | Important |
| Windows Notification | CVE-2026-50337 | Windows Notification Elevation of Privilege Vulnerability | Important |
| Windows Notification | CVE-2026-50334 | Windows Push Notification Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-50422 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-50341 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-50308 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50471 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50402 | NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-50388 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50313 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50417 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50309 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-56175 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-50494 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-56182 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-50482 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-58640 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50386 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50672 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-50668 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-49789 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-49797 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50448 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-49184 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-50412 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-50667 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-50461 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows OLE | CVE-2026-50686 | Windows OLE Remote Code Execution Vulnerability | Important |
| Windows OLE | CVE-2026-50344 | Windows OLE Elevation of Privilege Vulnerability | Important |
| Windows Operating Systems | CVE-2026-50317 | Windows Operating Systems Elevation of Privilege Vulnerability | Important |
| Windows Operating Systems | CVE-2026-50335 | Windows Operating Systems Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-54987 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-50435 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-50409 | Windows Overlay Filter Information Disclosure Vulnerability | Important |
| Windows PowerShell | CVE-2026-40400 | Windows PowerShell Remote Code Execution Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-57085 | Windows Print Spooler Information Disclosure Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-50499 | Windows Print Spooler Elevation of Privilege Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-50383 | Windows Print Spooler Information Disclosure Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-58608 | Windows Print Spooler Remote Code Execution Vulnerability | Critical |
| Windows Projected File System | CVE-2026-50469 | Windows Projected File System Elevation of Privilege Vulnerability | Important |
| Windows Push Notifications | CVE-2026-50430 | Windows Push Notification Information Disclosure Vulnerability | Important |
| Windows Push Notifications | CVE-2026-44800 | Windows Push Notifications Elevation of Privilege Vulnerability | Important |
| Windows Push Notifications | CVE-2026-50434 | Windows Push Notification Information Disclosure Vulnerability | Important |
| Windows Push Notifications | CVE-2026-50339 | Windows Push Notification Information Disclosure Vulnerability | Important |
| Windows Push Notifications | CVE-2026-50363 | Windows Push Notifications Elevation of Privilege Vulnerability | Important |
| Windows Quality of Service (QoS) Packet Scheduler | CVE-2026-50431 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-57982 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-57979 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-56190 | Remote Desktop Protocol Remote Code Execution Vulnerability | Important |
| Windows RDP | CVE-2026-58594 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Windows RDP | CVE-2026-55003 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-58546 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-58533 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-58535 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-50376 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-58539 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-50445 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2026-54126 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows Redirected Drive Buffering | CVE-2026-50372 | Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability | Important |
| Windows Remote Access Connection Manager | CVE-2026-50666 | Windows Remote Access Elevation of Privilege Vulnerability | Important |
| Windows Remote Access Service Infrastructure | CVE-2026-56647 | Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability | Important |
| Windows Remote Desktop Protocol | CVE-2026-50497 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows Remote Desktop Services | CVE-2026-58626 | Windows Remote Desktop Services Remote Code Execution Vulnerability | Important |
| Windows Remote Desktop Services | CVE-2026-50369 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| Windows Remote Help Defense | CVE-2026-55014 | Windows Remote Help Defense Elevation of Privilege Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-50492 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-50501 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-50357 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-58530 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-50318 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-49792 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-49793 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-50362 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-54109 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-50407 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-50441 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-57096 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-50451 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-49791 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important |
| Windows RPC API | CVE-2026-50365 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-54125 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50323 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50449 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50460 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50403 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50410 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50340 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50322 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50345 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50452 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50486 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50503 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50457 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50385 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50413 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-50348 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Runtime | CVE-2026-58527 | Windows Runtime Elevation of Privilege Vulnerability | Important |
| Windows Schannel | CVE-2026-56186 | Windows Secure Channel Information Disclosure Vulnerability | Important |
| Windows Secure Boot | CVE-2026-49783 | Secure Boot Security Feature Bypass Vulnerability | Important |
| Windows Secure Kernel Mode | CVE-2026-50392 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical |
| Windows Secure Kernel Mode | CVE-2026-42982 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical |
| Windows Secure Socket Tunneling Protocol (SSTP) | CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Critical |
| Windows Sensor Data Service | CVE-2026-58619 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Important |
| Windows Sensor Data Service | CVE-2026-50367 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Important |
| Windows Server | CVE-2026-50311 | Windows Server Elevation of Privilege Vulnerability | Important |
| Windows Server Backup | CVE-2026-50364 | Windows Backup Service Elevation of Privilege Vulnerability | Important |
| Windows Server Network driver | CVE-2026-56188 | Windows Server Network driver Remote Code Execution Vulnerability | Critical |
| Windows Server Update Service | CVE-2026-50328 | Windows Server Update Service (WSUS) Tampering Vulnerability | Important |
| Windows Server Update Service | CVE-2026-50444 | Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability | Critical |
| Windows SMB | CVE-2026-50690 | Windows SMB Information Disclosure Vulnerability | Important |
| Windows SMB | CVE-2026-58531 | Windows SMB Elevation of Privilege Vulnerability | Important |
| Windows SMB | CVE-2026-54997 | Windows SMB Information Disclosure Vulnerability | Important |
| Windows SMB | CVE-2026-49801 | Windows SMB Information Disclosure Vulnerability | Important |
| Windows SMB Server | CVE-2026-56168 | Windows SMB Server Denial of Service Vulnerability | Important |
| Windows SMB Server | CVE-2026-50360 | Windows SMB Server Elevation of Privilege Vulnerability | Important |
| Windows SMB Server Network Transport Driver (srvnet.sys) | CVE-2026-57089 | Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability | Important |
| Windows Spaceport.sys | CVE-2026-50298 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important |
| Windows Spaceport.sys | CVE-2026-50333 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important |
| Windows StateRepository API | CVE-2026-49170 | Windows StateRepository API Server file Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-58526 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage Spaces Direct | CVE-2026-50299 | Windows Storage Spaces Direct Remote Code Execution Vulnerability | Important |
| Windows Storage Spaces Direct | CVE-2026-49168 | Storage Spaces Direct Elevation of Privilege Vulnerability | Important |
| Windows Subsystem for Linux | CVE-2026-57973 | Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability | Important |
| Windows Subsystem for Linux | CVE-2026-57968 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability | Important |
| Windows System | CVE-2026-50418 | Windows System Secure Feature Bypass Vulnerability | Important |
| Windows TCP/IP | CVE-2026-49177 | Windows TCP/IP Information Disclosure Vulnerability | Important |
| Windows TCP/IP | CVE-2026-50306 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-54999 | Windows TCP/IP Remote Code Execution Vulnerability | Critical |
| Windows TCP/IP | CVE-2026-50307 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-50669 | Windows Telephony Server Elevation of Privilege Vulnerability | Important |
| Windows Terminal | CVE-2026-54124 | Windows Terminal Remote Code Execution Vulnerability | Important |
| Windows Trusted Runtime Interface Driver | CVE-2026-50350 | Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability | Important |
| Windows Unified Consent System | CVE-2026-50326 | Windows Unified Consent System Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-49790 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-50498 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows USB Audio Class driver (usbaudio.sys) | CVE-2026-58528 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Important |
| Windows USB Audio Class driver (usbaudio.sys) | CVE-2026-50453 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Important |
| Windows USB Audio Class driver (usbaudio.sys) | CVE-2026-49794 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Important |
| Windows USB Driver | CVE-2026-50321 | Windows USB Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Hub Driver | CVE-2026-50479 | Windows USB Hub Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-49802 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-58543 | Universal Print Management Service Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-49806 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-54991 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-55000 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-50674 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-54111 | Universal Print Management Service Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-54996 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Video Driver | CVE-2026-49804 | Windows USB Video Driver Elevation of Privilege Vulnerability | Important |
| Windows User Interface Core | CVE-2026-50454 | Windows User Interface Core Elevation of Privilege Vulnerability | Important |
| Windows Virtual Filtering Platform (VFP) | CVE-2026-50432 | Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability | Important |
| Windows VMSwitch | CVE-2026-57092 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | Critical |
| Windows WalletService | CVE-2026-49176 | Windows WalletService Elevation of Privilege Vulnerability | Important |
| Windows Web Proxy Auto-Discovery Protocol (WPAD) | CVE-2026-49800 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | Important |
| Windows Web Proxy Auto-Discovery Protocol (WPAD) | CVE-2026-50480 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | Important |
| Windows WebView | CVE-2026-56173 | Windows WebView Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-49805 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-57095 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-50416 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32K | CVE-2026-56184 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32K | CVE-2026-50489 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-54986 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-58632 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-50325 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-50297 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-54114 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-54107 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-54112 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K – GRFX | CVE-2026-56176 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Wireless Networking | CVE-2026-58628 | Windows Wireless Network Manager Elevation of Privilege Vulnerability | Important |
| Windows Wireless Wide Area Network Service | CVE-2026-50450 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important |
| Windows Wireless Wide Area Network Service | CVE-2026-50509 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | Important |
