Normal view

There are new articles available, click to refresh the page.

Today — 11 August 2026Main stream

CyberScoop
OpenAI says Daybreak will expand to offer specialized cyber services 10 August 2026 at 16:55

OpenAI says Daybreak will expand to offer specialized cyber services

By: djohnson

10 August 2026 at 16:55

OpenAI announced Monday it was expanding access to its frontier models for defensive cybersecurity, detailing different defensive and red-teaming workflows and a new partner program with major cybersecurity product providers.

In a pair of blogs posted Monday, OpenAI said it was updating its Daybreak program – which provides unreleased frontier models to private organizations and governments for defensive cybersecurity work – and introducing a new model variant.

Daybreak Blue, powered by OpenAI’s ChatGPT-5.6-Sol, would operate with lower cybersecurity safeguards compared to other commercially available models and is described as “a recommended starting point for most defenders” that supports tasks like vulnerability discovery, secure code review, malware analysis, incident response and patch validation.

Daybreak Red, meant for more advanced red-teaming, would provide access to a new model, dubbed GPT-5.6-Cyber, that the company said is more purpose-trained for finding vulnerabilities and testing (or exploiting) them. The model is also less likely to refuse requests around “dual-use cyber tasks.”

According to OpenAI, the organizations in Daybreak Red will have their use closely monitored and supervised, as GPT-5.6-Cyber is significantly more capable in carrying out malicious cyber tasks than Sol. A security evaluation the company devised tested both models on complex requests, including exploit chain development, authentication bypass, privilege escalation and other hacking tasks. Sol succeeded in 1.5% of the requests, while Cyber completed 95%.

OpenAI said it plans to publish a more detailed system card for GPT-5.6-Cyber at a later date.

“Models running with reduced safeguards carry risks beyond standard model usage, whether from misuse or misalignment,” the company said in a blog. “Despite these risks, we believe that democratizing access to frontier intelligence for defenders is crucial to accelerating and automating cyber defense.”

Additionally, OpenAI announced a partnership program with 16 major cybersecurity providers, saying organizations could access their models through their existing security services. The partners include IBM, CrowdStrike, Accenture, Ernst & Young, KPMG, Palo Alto Networks, Cisco, Cloudflare, Sophos and others.

“These partners bring deep security expertise and established relationships with organizations around the world,” OpenAI said in its blog. “By bringing our frontier cyber models into their services, we can help more defenders find serious vulnerabilities, validate which ones matter, and fix them faster.”

Companies like OpenAI, Anthropic and others are trying to rebalance their priorities after a string of AI-agent sandbox escapes have rattled policymakers and caused some cybersecurity experts to question if AI companies are doing enough to properly isolate the models from the internet during testing. Last week, OpenAI said it was intentionally slowing down development of its newer “Astra” model in order to develop better guardrails to restrain its behavior.

Cybersecurity and AI experts have told CyberScoop that while AI systems have greatly improved at finding and exploiting vulnerabilities in software code, they still require substantial human guidance and supporting infrastructure to operate as intended.

Additionally, some research has shown that without such guidance, even near-frontier models can struggle to fully patch a discovered vulnerability or avoid introducing new bugs with their fixes.

The post OpenAI says Daybreak will expand to offer specialized cyber services appeared first on CyberScoop.

Before yesterdayMain stream

CyberScoop
More than half of AI-generated patches are broken 7 August 2026 at 13:10

More than half of AI-generated patches are broken

CyberScoop

By: djohnson

7 August 2026 at 13:10

As AI-generated code continues to be injected into all corners of the internet, concerns have risen about an expanding attack surface for malicious hackers to exploit.

Some have argued that the enhanced cybersecurity capabilities of large language models could serve as a check, finding and fixing vulnerabilities nearly as fast as they’re created.

But new research that tested the patching capabilities of two popular commercial models, OpenAI’s ChatGPT 5.5 and Anthropic’s Claude Opus 4.8, found that generative AI is more likely to create an exploitable patch or introduce entirely new bugs than close off a vulnerability.

Researchers at 1Password tested the models ability to patch six “high-impact, high-complexity” CVEs, including the “Copy Fail” vulnerability, a kernel flaw that can give an attacker root access to Linux cloud environments. The overall success rate (or fully patching the vulnerability without introducing new problems), was less than a coin flip at 47%.

“Our research findings show that, in aggregate across a variety of scenarios, both Claude and ChatGPT had a low rate of successful patch generation, which we define as full remediation of all known exploit paths with no erroneous changes to application behavior,” wrote Keith Hoodlet, Axel Mierczuk and Spencer Michaels.

“The models often addressed only a subset of vulnerable code paths, added fragile guard code that satisfied tests while failing to address the vulnerability’s root cause, and sometimes introduced subtle changes in the application’s behavior while patching the immediate vulnerability,” the authors continued.

The research suggests that largely autonomous vulnerability-discovery and patching may not yet be effective in fixing the explosion of vulnerable code that is being created in the AI era.

Other private sector research has pointed to a similar problem. A report this year from Veracode found that while LLMs have made “enormous strides” in crafting workable code, “security is a different story.” Testing across a range of frontier models found the average security “pass rate” for AI generated code is around 56%. Newer models like GPT 5.5 push closer to 70%, while more than half sit between 50-53%.

Veracode tested 100 different models and while there was variability, in general a small number of models were showing progress on security patching while the rest have experienced “stagnation.” Similar to the 1Password research, in 44% of Veracode tests the models introduced a detectable OWASP Top 10 vulnerability into the codebase.

An important caveat: neither report tested newer models, like Anthropic’s Mythos or OpenAI’s GPT-5.6-Sol, that frontier companies tout as having significantly higher cybersecurity capabilities.

Those advanced models can identify and fix vulnerable code. Anthropic and OpenAI are distributing them to key industries through Project Glasswing and Daybreak before foreign or open-source alternatives can compete.

Tim Jarret, vice president of product at Veracode, told CyberScoop that AI tools are still subject to a range of limitations that can make them unreliable for cybersecurity patching without knowledgeable humans in the loop.

While some vulnerabilities – like SQL injections – can be easily patched through automation, other bugs like cross-site scripting, can be exploitable in several different ways and require either a human touch, additional context or both to fully close off. Additionally, models can slowly lose context from prior sessions over time, affecting their ability to complete tasks correctly and raising the possibility they’ll hallucinate to fill in the missing gaps.

“I think we would say, at this point, that Iits premature to treat those as anything other than another code change to the code base that needs to be reviewed and accepted by the team, as opposed to letting the agent merge the code freely,” said Jarrett.

However, he acknowledged that may not be possible in a world where AI agents are generating exponentially more code for human defenders to review. Some kind of automated code review will be necessary – preferably not by the same automation tool that produced the code. The ultimate goal is the same as it has always been in security: “trust but verify.”

“Ninety percent of the time, the human check might just be ‘did the cross check look good?’ Do we have a thumbs up?’” Jarrett said. “In those cases where there’s still something wrong, that’s where you focus your attention a little bit more.”

The post More than half of AI-generated patches are broken appeared first on CyberScoop.

Business Insights Cybersecurity Blog by Bitdefender
Rapidly Rising Risk: AI in the Shadows 4 August 2026 at 11:19

Rapidly Rising Risk: AI in the Shadows

Business Insights Cybersecurity Blog by Bitdefender

By: Nicholas Jackson

4 August 2026 at 11:19

Artificial intelligence is breaking a long-standing model within many organizations.

Rapid7 Cybersecurity Blog
CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild 4 August 2026 at 07:11

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Rapid7 Cybersecurity Blog

By: Rapid7

4 August 2026 at 07:11

Overview

On August 2, 2026, N-able published a security advisory for CVE-2026-18577, an authentication bypass vulnerability affecting N-central that was discovered being exploited in-the-wild after an incomplete fix for an earlier authentication bypass issue, CVE-2026-18556 was disclosed. CVE-2026-18577 allows a remote unauthenticated attacker to bypass authentication and obtain administrative control of vulnerable N-central servers in affected deployments.

N-able N-central is a widely deployed Remote Monitoring and Management (RMM) platform used by managed service providers (MSPs) and enterprise IT teams to centrally administer servers, workstations, network devices, and other managed assets. Because the platform operates with extensive administrative privileges across customer environments, successful compromise of an N-central server can provide attackers with an efficient path to compromise downstream managed systems.

According to N-able, exploitation of CVE-2026-18577 has been observed in the wild since August 1, 2026. Following successful exploitation, attackers leveraged the platform's Take Control functionality to remotely access managed endpoints, and deployed Cloudflare Tunnel (cloudflared) to establish persistent remote access. On August 3, 2026, CVE-2026-18577 was added to CISA’s Known Exploited Vulnerability (KEV) catalog and on August 5, 2026, CVE-2026-18556 was also added to the catalog.

Mitigation guidance

Organizations operating vulnerable N-central deployments should prioritize remediation on an urgent basis, outside of normal patching schedules. Hosted N-central environments are upgraded automatically by the vendor, while on-premise deployments require manual remediation.

Affected versions:

All versions of N-able N-central up to and including version 2026.3.1, prior to Hotfix 1.

Fixed version:

N-able N-central 2026.3.1 Hotfix 1 (2026.3.1.7).

The vendor also recommends:

Upgrading N-central agents after applying the server hotfix.
Reviewing systems for indicators of compromise.
Contacting N-able Support immediately if evidence of compromise is discovered.
Engaging internal incident response teams if malicious activity is identified.

For further information, see the vendor advisory.

IOCs

N-able has published several artifacts that administrators should investigate during incident response.

Endpoint Artifacts:

Presence of a Cloudflared service.
A suspicious svchost.exe located within the user's Documents folder.

Network Indicators:

Administrators should review historical network logs for inbound or outbound communication involving the malicious IP addresses identified by the vendor:

173[.]249[.]252[.]200
87[.]249[.]138[.]34
37[.]19[.]210[.]32
37[.]153[.]90[.]88
92[.]118[.]112[.]181
68[.]235[.]46[.]214

Organizations should also review:

Authentication logs
Administrative account creation or modification
Take Control session activity
Remote management logs
Windows service installation events

To assist affected organizations running N-central, the vendor has provided a detection template for CVE-2026-18577, which organizations can use to help identify potential compromise.

Rapid7 customers

Exposure Command, InsightVM, and Nexpose

Exposure Command, InsightVM, and Nexpose customers can assess exposure to CVE-2026-18577 and CVE-2026-18556 with vulnerability checks available in the August 4 content release. Note that potential check type must be enabled in the scan template before scanning.

Updates

August 4, 2026: Initial publication.
August 4, 2026: Updated Rapid7 customers section to reflect the availability of vulnerability checks.
August 7, 2026: Updated the Overview and Rapid7 Customers sections to indicate addition of CVE-2026-18556 to CISA KEV and availability of vulnerability checks.

CyberScoop
CrowdStrike: AI is now both the weapon and the target in cyberattacks 3 August 2026 at 03:01

CrowdStrike: AI is now both the weapon and the target in cyberattacks

CyberScoop

By: Matt Kapko

3 August 2026 at 03:01

While AI is supposed to help defenders, it’s now creating more than twice as much noise as human-triggered incidents CrowdStrike detects as potentially malicious. The company’s threat hunting team and systems triaged an average of 14 million detection leads daily, resulting in about 36,000 customer alerts during the one-year period ending in June.

“AI agent-driven behaviors have surged past human triggers,” said Adam Meyers, senior vice president of counter adversary operations at CrowdStrike. “AI has driven the detections significantly above what humans are causing, and this gives you a sense of how frequently AI is being used, and really just that it’s being used everywhere.”

The threat posed by AI showed up incessantly during the past year, sparking alarming shifts and heightened targeting across software defects, open-source supply chains and AI tools themselves — all of which create greater difficulties for defenders, CrowdStrike said in its annual threat hunting report.

“The AI tools that are being implemented by every enterprise across the globe right now are also creating an extended attack surface,” Meyers said during a press briefing.

“AI is now a tool, a target, and a force multiplier for adversaries,” researchers wrote in the report, adding that AI-enabled malicious activity surged 89% during the past year as attackers used the technology to scale operations, hasten tradecraft and target AI infrastructure.

Attackers are using frontier AI models to uncover vulnerabilities and develop resources, including AI-generated scripts, payloads and commands that increase their effectiveness and efficiency. The technology also allows threat groups to design more creative ways to run automated attacks and boost impact by manipulating, interrupting or sabotaging AI systems and data.

“AI is both the weapon and the target,” Meyers said.

Most organizations don’t view it as such, and thus far haven’t secured or put proper guardrails around the AI tools they use or address the ways attackers can use AI against them, he added.

AI’s mark on vulnerabilities is particularly concerning, as reflected by what Meyers described as “one of the scarier stats” in this year’s report: 88% of vulnerabilities were weaponized through AI within 48 hours.

“This is creating a rich ecosystem of vulnerabilities for attackers to use against various systems,” he said. It also renders the 30-day patch window obsolete, forcing organizations to struggle under a new baseline patch cycle of 24 to 48 hours, according to Meyers.

The AI ecosystem also became the next software supply chain battleground during the past year, as evidenced by TeamPCP’s rampage through open-source software in the first half of this year.

The threat cluster compromised more than 300 software dependencies in one day, Meyers said.

AI tools are already in the crosshairs and the attack surface will continue to grow as agentic systems, AI application integrations and dependency managers for AI agents proliferate, the report concluded.

“The same AI tools driving modern businesses are creating under-defended attack surfaces that adversaries are exploiting,” Meyers said. “We have to secure AI. This is absolutely critical.”

The post CrowdStrike: AI is now both the weapon and the target in cyberattacks appeared first on CyberScoop.

Business Insights Cybersecurity Blog by Bitdefender
GravityZone Achieves Top Results in AV-Comparatives Testing 30 July 2026 at 14:41

GravityZone Achieves Top Results in AV-Comparatives Testing

Business Insights Cybersecurity Blog by Bitdefender

By: Richard De La Torre

30 July 2026 at 14:41

Over the past seven AV-Comparatives Real-World Protection Tests, Bitdefender is the only vendor to consistently stay at or above a 99.8% protection rate. And in the 2026 testing, Bitdefender GravityZone once again allowed the fewest compromised systems while maintaining among the lowest false-positive counts. Bitdefender GravityZone continues to show consistent and superior efficacy among its peers in the latest real-world AV-Comparative Business Security Test.

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

Rapid7 Cybersecurity Blog

By: Rapid7 Labs

30 July 2026 at 12:11

Overview

On July 29, 2026, the Ruby on Rails project published a security advisory for CVE-2026-66066, a critical vulnerability affecting Active Storage image processing when used in conjunction with the libvips image processing library. The vulnerability has a CVSSv4 score of 9.5 and is classified as Initialization of a Resource with an Insecure Default (CWE-1188). An unauthenticated attacker may be able to leverage CVE-2026-66066 and read files accessible to the Rails application process, potentially exposing secrets that could enable remote code execution (RCE) or access to connected systems.

An application is affected when it uses libvips for Active Storage image processing and accepts image uploads from untrusted users. Rails notes that generating image variants is not a separate requirement for exposure. Vips is the default Active Storage variant processor for applications configured with Rails 7.0 or later defaults. According to Ethiack, only the Vips processor is affected; applications using Magick are not affected through the reported vector.

As of July 30, 2026, Rapid7 is not aware of exploitation in the wild. Ethiack and GMO Flatt Security, who independently reported the vulnerability, have withheld proof-of-concept code and details of the full attack chain. Public code claiming to exploit CVE-2026-66066 exists, but it is unclear how closely it corresponds to the full attack chain reported privately to Rails. According to the Rails Security Announcement, additional details will be disclosed no later than August 28, 2026. Rapid7 recommends remediating affected applications on an urgent basis, outside of normal patch cycles.

Update #1: On July 31, 2026, Rails published technical details and forensic tools earlier than its planned August 28 disclosure date after several researchers reverse-engineered the attack and published proof-of-concept code.

Technical overview

libvips uses operations to load and save image formats, including operations backed by third-party libraries. Some are marked "unfuzzed" or "untrusted" because they are unsafe for untrusted content. According to Rails, Active Storage did not disable these operations before processing user-supplied files, which may allow a crafted upload to trigger an unsafe operation and disclose files readable by the application.

The attack details published by Rails describe a chain in which an attacker creates a blob through Active Storage's direct-upload endpoint with a false image content type and obtains a genuine signed variation_key from a page that renders an Active Storage representation. A crafted file identifies itself to libvips as a MATLAB level 5 file but to libmatio as a MAT 7.3 HDF5 container. HDF5's External File List then reads bytes from an attacker-selected path, which are rendered as image pixels and returned in the resulting variant. This known chain also requires the deployed libvips build to include the matload operation.

For this documented chain, the Active Storage direct-upload route must be reachable. When Active Storage routes are mounted, the direct-upload route is present by default even if the application's own interface does not use direct uploads. Rapid7 testing found that ordinary server-side attachment does not satisfy this chain because Rails re-identifies the crafted file as MATLAB data before variant processing.

The arbitrary file-read stage does not require knowledge of secret_key_base or a forged variation key. Rapid7 also verified an RCE escalation in which recovered Rails signing material is used to forge an ImageProcessing 1.x variation; this path does not require Marshal deserialization.

The Rails patch that remediates CVE-2026-66066, disables untrusted operations during Active Storage initialization. When ruby-vips is installed, patched versions prevent the application from starting if ruby-vips or libvips is too old to support that protection.

On August 3, 2026, Rapid7 Labs published a full root cause technical analysis of CVE-2026-66066, detailing the full RCE chain and accompanying metasploit module.

Mitigation guidance

Organizations running affected Ruby on Rails applications should upgrade to a fixed Active Storage release and ensure libvips is 8.13 or later. Updating Rails or Active Storage alone is not sufficient when an older libvips version is installed.

Rails has published forensic tools to assess whether an application was vulnerable and search Active Storage data for crafted files. Because scheduled cleanup of unattached blobs may remove evidence, Rapid7 recommends beginning forensic assessment promptly.

The Rails advisory identifies patched Active Storage releases 7.2.3.2, 8.0.5.1, and 8.1.3.1. The fixed Rails releases are:

Rails branch	Affected versions	Fixed version
Rails 7.x	7.0.0 through 7.2.3.1	7.2.3.2
Rails 8.0.x	8.0.0 through 8.0.5	8.0.5.1
Rails 8.1.x	8.1.0 through 8.1.3	8.1.3.1

The Rails advisory lists all Active Storage releases earlier than 7.2.3.2 as affected, which includes releases before Rails 7.0. Ethiack reports that Rails 6.0.0 through 6.1.7.10 may be affected when Active Storage is configured to use Vips, and Rapid7 has verified that the known attack works on the Rails 6.0 and 6.1 branches under that non-default configuration. Rails has not published fixed releases for branches earlier than 7.2, so affected applications on those branches should migrate to a supported fixed branch or apply the applicable workaround below.

When ruby-vips is installed, organizations should ensure it is 2.2.1 or later. Rails advises affected organizations to replace secret_key_base and other secrets accessible to the application process, including the Rails master key and the credentials it decrypts, storage service credentials, database credentials, and third-party service tokens or keys. Replacing secret_key_base expires active sessions and affects encrypted and signed cookies, signed global IDs, and Active Storage URLs.

As a temporary workaround on libvips 8.13 or later, organizations can set VIPS_BLOCK_UNTRUSTED or, with ruby-vips 2.2.1 or later, call Vips.block_untrusted(true) from an initializer. For libvips versions earlier than 8.13, Rails states that the only workaround is to remove the libvips dependency.

For the latest mitigation guidance, please refer to the Ruby on Rails security advisory.

Rapid7 customers

Exposure Command, InsightVM, and Nexpose

Exposure Command, InsightVM, and Nexpose customers can assess exposure to CVE-2026-66066 with vulnerability checks expected to be available in the July 31 content release.

Updates

July 30, 2026: Initial publication.
July 31, 2026: Updated with technical details and forensic resources published by Rails, and clarified the affected version range.
August 3, 2026: Added a Technical analysis section for the new Rapid7 Analysis.

CyberScoop
Okta’s deal for Permiso aims to close gaps in identity threat detection 30 July 2026 at 16:47

Okta’s deal for Permiso aims to close gaps in identity threat detection

CyberScoop

By: Greg Otto

30 July 2026 at 16:47

Okta announced Thursday it has signed a deal to buy Permiso Security, a cloud-based firm that tracks threats tied to human, machine, and AI-driven digital identities.

Permiso specializes in spotting risks after a user or system has already logged in, an area the industry refers to as identity threat detection and response. The company draws on more than 2,500 signals gathered from over 70 identity-related partners to flag issues such as excessive access permissions, unused credentials, unusual behavior from AI agents, and violations of internal security policies.

Ely Kahn, Okta’s chief product officer, told CyberScoop that Permiso will allow Okta to merge two functions that have operated separately: real-time threat detection and identity security posture management. “Today those are two separate products that don’t really talk to each other,” he said.

Combining them, Kahn said, produces sharper alerts for security teams. As an example, he described a hypothetical scenario where a dormant administrator account is flagged by posture-management tools that later shows a login from an unfamiliar IP address. “By combining those things, you now have a very high-confidence, high-fidelity alert that’s more actionable by a security operations team,” Kahn said. “A security operations team on its own might not care about the dormant account, but when you combine that with some threat signals, then it becomes a higher critical-level alert.”

A crucial part of the deal, according to Kahn, is that Permiso will bring visibility beyond Okta’s current threat detection products, telling CyberScoop that customers also rely on other identity systems, such as Microsoft Entra ID or Active Directory, that fall outside that view.

“For us to be a real player in the identity security space, we have to look beyond the Okta perspective and give folks a full view into their identity threats,” he said.

The acquisition also fits into a security landscape reshaped by artificial intelligence. According to figures cited by Okta, 58% of executives say their organizations experienced an AI-related security incident or a near miss within the past year. That trend has pushed identity companies like Okta to expand beyond authentication and into continuous monitoring of what accounts, including AI agents, actually do once inside a system.

“Agents will be breached,” Kahn said. “The most important thing you can do is ensure that if an agent is compromised, the blast radius is small,” through a narrowly defined, revocable identity tied to each agent.

Among the capabilities Okta says it will gain is a tool called SandyClaw, which tests AI agent skills and prompts in an isolated environment before they are allowed into a customer’s systems, aiming to catch supply-chain attacks embedded in AI tools. Other planned additions include expanded tracking of AI agent behavior across cloud platforms and software-as-a-service tools, and automated systems to investigate and isolate AI agents that appear compromised or misconfigured.

The transaction is expected to close in the third quarter of Okta’s 2027 fiscal year, pending standard regulatory and closing conditions. Terms of the acquisition, including its purchase price, were not disclosed.

The post Okta’s deal for Permiso aims to close gaps in identity threat detection appeared first on CyberScoop.

SecurityWeek RSS Feed
Cantina Emerges From Stealth With $8 Million in Funding 30 July 2026 at 09:00

Cantina Emerges From Stealth With $8 Million in Funding

SecurityWeek RSS Feed

By: Ionut Arghire

30 July 2026 at 09:00

The startup’s community-powered agentic security platform helps proactively identify, prioritize, and remediate vulnerabilities.

The post Cantina Emerges From Stealth With $8 Million in Funding appeared first on SecurityWeek.

SecurityWeek RSS Feed
US, Australia Release OT Isolation Guidance for Critical Infrastructure 29 July 2026 at 06:58

US, Australia Release OT Isolation Guidance for Critical Infrastructure

SecurityWeek RSS Feed

By: Ionut Arghire

29 July 2026 at 06:58

The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an extended period.

The post US, Australia Release OT Isolation Guidance for Critical Infrastructure appeared first on SecurityWeek.

Business Insights Cybersecurity Blog by Bitdefender
When Visibility Becomes the Target: Bitdefender at Black Hat USA 2026 27 July 2026 at 20:00

When Visibility Becomes the Target: Bitdefender at Black Hat USA 2026

Business Insights Cybersecurity Blog by Bitdefender

By: Yasser Fuentes

27 July 2026 at 20:00

For more than a decade, the cybersecurity industry has invested heavily in improving detection.

Rapid7 Cybersecurity Blog
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild 23 July 2026 at 07:57

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Rapid7 Cybersecurity Blog

By: Rapid7

23 July 2026 at 07:57

Overview

On July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as improper authentication (CWE-287). CVE-2026-16232 has been assigned a critical CVSS score of 9.1. The vulnerability allows an unauthenticated remote attacker to obtain an application login token and authenticate to the management server with full administrative privileges, enabling modification of security policies and configurations.

Check Point has confirmed that CVE-2026-16232 is being actively exploited in the wild, affecting what the vendor describes as a small number of customers. Remote exploitation requires network access to the Management Server IP address in environments that do not restrict Trusted Clients. On the same day as the advisory, CVE-2026-16232 was added to the U.S. Cybersecurity and Infrastructure Security Agency's (CISA) list of known exploited vulnerabilities (KEV), with a remediation due date of July 25, 2026, giving organizations only three days to respond.

The advisory addresses three vulnerabilities in total:

CVE	CVSS	Description	Affected Products	Exploitation Status
CVE-2026-16232	Vendor: 9.3 (Critical) CISA: 9.1 (Critical)	Authentication bypass via SmartConsole application token	Security Management, Multi-Domain Management	Exploited in the wild
CVE-2026-62144	Vendor: 9.3 (Critical) CISA: 9.1 (Critical)	Management authentication bypass and privilege escalation	Security Management, Multi-Domain Management	No known exploitation
CVE-2026-62145	7.5 (High)	Local privilege escalation in GaiaOS WebUI	Firewall, Multi-Domain Management, Multi-Domain Log Server	No known exploitation

Compromise of a Security Management Server is particularly consequential because it sits at the top of the trust hierarchy. An attacker with administrative access can modify security policies across managed gateways, alter administrator permissions, manipulate VPN configurations, and potentially disable or tamper with logging and monitoring. According to Check Point's advisory, the vulnerabilities were discovered during a routine internal review, with subsequent analysis revealing that CVE-2026-16232 had been exploited prior to the availability of a patch.

Check Point network security products have been targeted by multiple in-the-wild vulnerabilities over the past two years. In June 2026, CVE-2026-50751, a critical authentication bypass in Check Point Remote Access VPN, was exploited in the wild and added to the CISA KEV. In May 2024, CVE-2024-24919, a high-severity information disclosure vulnerability in Check Point Quantum Security Gateways, was also exploited in the wild. Organizations running affected Check Point management products should apply the available hotfixes on an emergency basis.

Technical analysis

On July 28, 2026, Rapid7 Labs published a full root cause technical analysis of CVE-2026-16232. Our analysis details the vulnerability and how an unauthenticated attacker can exploit the vulnerability to login to a vulnerable appliance via SmartConsole with full admin privileges.

Mitigation guidance

Check Point released Jumbo Hotfixes on July 22, 2026, to remediate CVE-2026-16232, CVE-2026-62144, and CVE-2026-62145. Organizations running affected versions of Security Management or Multi-Domain Management should install the latest Jumbo Hotfix on an emergency basis, without waiting for a regular patch cycle to occur.

The following versions are affected by CVE-2026-16232:

R82.10: fixed in Jumbo Hotfix Take 36 and later
R82: fixed in Jumbo Hotfix Take 118 and later
R81.20: fixed in Jumbo Hotfix Take 158 and later
R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30: no fix specified

CVE-2026-62144 and CVE-2026-62145 affect the same release families (R81.10, R81.20, R82, R82.10) per the vendor advisory, with older versions also impacted.

Smart-1 Cloud customers are already protected according to Check Point. For on-premises deployments where the hotfix cannot be applied immediately, Check Point recommends the following steps to reduce exposure:

Restrict Trusted Clients (GUI clients) to trusted IP addresses or subnets
Protect Management access with a firewall and restrict access to trusted IP addresses
Verify that implied rules for control connections are enabled

These mitigations reduce the attack surface, but they do not address the underlying vulnerability. Installing the Jumbo Hotfix remains the priority.

Rapid7 strongly recommends investigating for signs of compromise even after applying the hotfix, particularly in environments where the Management Server has been accessible from the internet. Organizations should review administrator, SmartConsole, API, and application token activity, and search logs for the published indicators of compromise listed below.

For the latest mitigation guidance, please refer to the vendor advisory.

Rapid7 customers

Exposure Command, InsightVM, and Nexpose

Exposure Command, InsightVM, and Nexpose customers can assess exposure to CVE-2026-16232, CVE-2026-62144, CVE-2026-62145 with authenticated vulnerability checks available in the 24 July content release.

Indicators of compromise

Check Point has published the following IP addresses associated with observed exploitation of CVE-2026-16232:

151.241.99[.]207
151.241.99[.]233
158.62.198[.]182
192.142.10[.]99
139.28.37[.]250
194.213.18[.]137

Per the vendor, the presence of these indicators should prompt investigation, but the absence of these addresses does not confirm that an environment was unaffected.

Updates

July 23, 2026: Initial publication.
July 24, 2026: Updated to reflect availability of vulnerability checks.
July 28, 2026: Added a Technical analysis section for the new Rapid7 Analysis.

Business Insights Cybersecurity Blog by Bitdefender
What’s New in GravityZone July 2026 (v 6.75) 16 July 2026 at 18:29

What’s New in GravityZone July 2026 (v 6.75)

Business Insights Cybersecurity Blog by Bitdefender

By: Grzegorz Nocoń

16 July 2026 at 18:29

Bitdefender rolled out new functionality in Bitdefender GravityZone, a unified cybersecurity platform that provides prevention, protection, detection, and response capabilities for organizations of all sizes. These features, consistent with our multi-layered security strategy, are intended to ease the workload of security analysts, administrators, and users.

SecurityWeek RSS Feed
CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities 15 July 2026 at 10:07

CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities

SecurityWeek RSS Feed

By: Ionut Arghire

15 July 2026 at 10:07

Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.

The post CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities appeared first on SecurityWeek.

SecurityWeek RSS Feed
White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative 15 July 2026 at 06:18

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative

SecurityWeek RSS Feed

By: Eduard Kovacs

15 July 2026 at 06:18

The new program stems from an AI-focused Executive Order signed by President Trump on June 2.

The post White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative appeared first on SecurityWeek.

Business Insights Cybersecurity Blog by Bitdefender
Bind Link Abuse: One Windows Feature, Many Ways to Blind Your EDR 15 July 2026 at 08:52

Bind Link Abuse: One Windows Feature, Many Ways to Blind Your EDR

Business Insights Cybersecurity Blog by Bitdefender

By: Martin Zugec

15 July 2026 at 08:52

I’d like to thank my coauthors, Andrei-Marius Muntea, Andrei Mermeze, Radu-Marian Portase, and Vlad Lazar, for their invaluable contributions to this research.

CyberScoop
Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record 14 July 2026 at 16:05

Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record

CyberScoop

By: Matt Kapko

14 July 2026 at 16:05

Microsoft’s monthly Patch Tuesday security program reached an unrivaled pinnacle this month, as the vendor addressed 622 vulnerabilities across its suite of business products and systems.

“The bug apocalypse has finally descended upon us,” Dustin Childs, head of threat awareness at Trend Micro’s Zero Day Initiative, wrote in a blog post Tuesday.

“The mother of all releases. To call this record-breaking is an understatement,” he added. “The CVE count year-to-date exceeds all other years’ totals.”

The startling increase in vulnerabilities reflects a compounding effect taking root across software as artificial intelligence plays a growing role in discovering and developing patches for defects lurking in error-riddled applications.

Microsoft’s June Patch Tuesday update broke the previous all-time record with 206 vulnerabilities.

The company last week warned forewarned customers and defenders that a flood of defects would be uncovered as it applies its multi-model agentic scanning harness (MDASH) to discover and address vulnerabilities at greater speed and scale.

The monthly exponential rise in Microsoft vulnerabilities already puts the vendor on pace to break a full-year record, ending 2026 with the largest annual collection of defects, beating the previous record of 1,245 CVEs in 2020, Satnam Narang, senior staff research engineer at Tenable, said in an email.

“It’s probable that we will not only exceed 2,000 CVEs in a calendar year, but potentially over 3,000 CVEs this year or more,” he added.

“The volume is striking, but it reflects how good these tools have become at finding bugs, not how many of those bugs actually pose a risk to organizations,” Narang said.

Microsoft disclosed two actively exploited zero-day vulnerabilities — CVE-2026-56155 and CVE-2026-56164, privilege escalation defects in Active Directory Federation Services and Microsoft SharePoint Server, respectively.

The monthly batch of patches included 416 defects in Windows, 82 in Office and 46 in Microsoft Edge. More than 1 in 10 vulnerabilities the vendor disclosed — 63 total — were rated as critical.

“The products covered this month are also astonishing,” Childs said. “Just about everything you’ve ever heard of is getting patched.”

The full list of vulnerabilities addressed this month is available in Microsoft’s Security Response Center.

SAP also addressed a fresh assortment of vulnerabilities Tuesday, including critical defects CVE-2026-44747 in SAP NetWeaver Application Server and CVE-2026-27690 in SAP Approuter.

The post Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record appeared first on CyberScoop.

Rapid7 Cybersecurity Blog
Patch Tuesday - July 2026 14 July 2026 at 18:00

Patch Tuesday - July 2026

Rapid7 Cybersecurity Blog

By: Adam Barnett

14 July 2026 at 18:00

Microsoft is publishing 622 vulnerabilities on July 2026 Patch Tuesday, including a record-breaking 416 Windows vulnerabilities. Microsoft is aware of exploitation in the wild for two of the vulnerabilities published today, both of which are listed on CISA KEV, as well as public disclosure for one other. As usual, browser vulns are not included in the Patch Tuesday count above. Rapid7 noted last month that Microsoft no longer enumerates Chromium CVEs in the Security Update Guide. However, Microsoft has now taken the pursuit of minimalism much further, since today’s Security Update Guide no longer lists out even Microsoft vulnerabilities! Instead, we now receive a summary table of vulnerability counts by product family, as well as a new slimline “Notable CVEs” section. All of this only serves to illustrate the recent industry-wide trend of exploding vulnerability report counts, with an associated uptick in the publication of remediations as a trailing indicator.

SharePoint: critical auth bypass by Rapid7

Today sees the publication of CVE-2026-55040, a critical authentication bypass in Microsoft SharePoint. Discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer, and published today in coordination with Microsoft, this vulnerability is the first in a pair of exploits which, when chained together, can lead to unauthenticated remote code execution against a vulnerable SharePoint server. Patches are available for SharePoint Server Subscription Edition, 2019, and 2016. As the full Rapid7 blog post sets out, the second vulnerability in the full RCE chain remains embargoed for now, with Microsoft expected to publish patches for that second vulnerability as part of Patch Tuesday August 2026. Microsoft noted: “We would like to thank Rapid7 for responsibly reporting this issue through coordinated vulnerability disclosure.”

SharePoint: zero-day EoP

It’s a rare Patch Tuesday which doesn’t include multiple SharePoint fixes, and today is no exception. Microsoft is aware of existing in-the-wild exploitation of CVE-2026-56164, where successful exploitation allows an attacker to elevate privileges over a network, with no existing privileges required, and low attack complexity since “an attacker does not require significant prior knowledge of the system, and can achieve repeatable success”. This is as good an example as any that a relatively low CVSS v3 base score (5.3) may be an imperfect signal concealing something much spicier, and Microsoft acknowledges that possibility by assigning a severity rating of Important. Microsoft certainly intended to list CVE-2026-56164 in the new Notable CVEs section of the Security Update Guide instead of erroneously listing CVE-2026-56155 twice, and it’s likely that this will be corrected shortly.

What’s the opposite of coordinated disclosure?

After years of relative stability, the Patch Tuesday process has experienced significant turbulence so far in 2026. As well as the AI-fuelled exponential growth of vulnerability reporting and discovery, Microsoft is grappling with the emergence of a series of vulnerabilities disclosed in such a way as to bring maximum discomfort for Redmond. Pseudonymous researcher Nightmare Eclipse dropped another Defender elevation of privilege vulnerability in the hours following Patch Tuesday June 2026, which Microsoft subsequently published and patched as CVE-2026-50656, along with a terse acknowledgement of the vulnerability’s celebrity nickname of RoguePlanet. Recently, Nightmare Eclipse has given conflicting estimates of what sort of surprises Microsoft can expect today, as well as claiming that the CVE-2026-50656 patches introduce a new avenue for a disk exhaustion attack. Today, a new proof of concept for a further vulnerability nicknamed LegacyHive has emerged from the same source, which appears to allow a non-privileged user to mount another user’s user hive.

Microsoft BitLocker receives patches today for a publicly-known security feature bypass vulnerability. The advisory for CVE-2026-50661 explains that an unauthorized attacker with physical access to the target machine can bypass Windows BitLocker. While Microsoft doesn’t confirm either way, it’s very probable that this is a patch for the GreatXML vulnerability which Nightmare Eclipse announced the day after Patch Tuesday June 2026.

Active Directory Federation Services: zero-day EoP

Active Directory administrators should note the emergence today of CVE-2026-56155, an exploited-in-the-wild elevation of privilege vulnerability in Active Directory Federation Services which allows an authorized attacker to elevate privileges locally. Eight other vulnerabilities are also published today in Active Directory Federation Services, all ranked as Important on Microsoft’s proprietary severity ranking scale. The advisory doesn’t explicitly describe the location of the attacker, but it’s likely that an attacker would need an existing toehold on the target system to chain together with the elevation of privilege opportunity on offer here.

Age of Empires II: RCE

Historically, Patch Tuesday hasn’t seen too many security patches for video games. However, Age of Empires II: Definitive Edition is a new entrant to the Microsoft CVE roster today. Veteran AoE2 players may well be familiar with dangerous opposition early game strategies such as the Persian Town Center nuisance or the Aztec monk rush, but anyone who opens a malicious game scenario file without applying the patch for CVE-2026-50663 might suffer a serious defeat. Successful exploitation allows an attacker to place malicious files in unexpected locations, potentially enabling code execution on the target system.

Microsoft lifecycle update

As Rapid7 noted last month, there are some significant Microsoft product lifecycle changes taking place in mid-July. SQL Server 2016 moves beyond regular extended support and into the pay-to-play Extended Security Updates (ESU) phase from July 15, 2026, and its older sibling SQL Server 2014 moves into the third and final year of ESU. Also on July 14, 2026, SharePoint Server 2016 and 2019 reach extended end date, and since there’s no ESU available, the only remaining option for fully-supported self-hosted SharePoint after today is SharePoint Subscription Edition. The July 2026 lifecycle casualties continue with Project Server 2016 and 2019, Dynamics GP 2016 and 2016 R2, InfoPath 2013, and SharePoint Designer 2013, which also all reach their Extended End Dates, ending their supported lifecycles. Visual Studio 2022 Version 17.12 Long-Term Servicing Channel (LTSC) reaches its release end date on July 14, leaving either the Visual Studio 2022 current channel or an upgrade to Visual Studio 2026 as supported options.

Summary charts

Summary tables

Apps vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-58617	M365 Copilot for iOS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-58595	Microsoft Bing App for IOS Spoofing Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-48561	Microsoft Copilot Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.6
CVE-2026-58636	Microsoft PC Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50438	Microsoft PC Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-54124	Windows Terminal Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8

Azure vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-50652	Azure Active Directory Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50653	Azure Active Directory Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-57969	Azure CycleCloud Elevation of Privilege Vulnerability	N/A	No	8.8
CVE-2026-58279	Azure CycleCloud Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-47632	Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50338	Azure Spring Apps Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2

Developer Tools vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-47302	.NET Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50525	.NET Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50651	.NET Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-57108	.NET Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50524	.NET Framework Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50527	.NET Framework Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50648	.NET Framework Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50650	.NET Framework Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50646	.NET Framework Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50649	.NET Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-47304	.NET Security Feature Bypass Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-50528	.NET Security Feature Bypass Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-50659	.NET Spoofing Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50526	.NET Tampering Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-56170	ASP.NET Core Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-47300	ASP.NET Core Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-47303	ASP.NET Core Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-47282	GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-41109	GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50506	OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-45646	OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50520	Visual Studio Code Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.4
CVE-2026-45496	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-57101	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-57102	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-47305	Visual Studio Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8

Device vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-48581	Surface Broker SDMA Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8

ESU vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-54121	Active Directory Certificate Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50682	Active Directory Denial of Service Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-50647	Active Directory Federation Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50684	Active Directory Federation Server Spoofing Vulnerability	N/A	No	4.8
CVE-2026-56155	Active Directory Federation Services Elevation of Privilege Vulnerability	Exploitation Detected	No	7.8
CVE-2026-50491	Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50381	Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50427	Content Delivery Manager Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50692	Desktop Window Manager Elevation of Privilege Vulnerability	N/A	No	8.8
CVE-2026-48564	DHCP Server Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50370	DHCP Server Service Remote Code Execution Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-56159	DHCP Server Service Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-50296	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50375	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	6.3
CVE-2026-50493	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56643	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56644	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58629	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50382	DirectX Graphics Kernel Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-49174	DNS Client Tampering Vulnerability	Exploitation Unlikely	No	6.1
CVE-2026-50495	DNS Client Tampering Vulnerability	Exploitation Less Likely	No	6.1
CVE-2026-49787	HTTP.sys Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-49788	HTTP/2 Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50696	Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50329	Microsoft DWM Core Library Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-58541	Microsoft DWM Core Library Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55006	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55009	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-55005	Microsoft Exchange Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-55008	Microsoft Exchange Server Spoofing Vulnerability	Exploitation More Likely	No	9.6
CVE-2026-50343	Microsoft Install Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-54992	Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability	Exploitation More Likely	No	8.4
CVE-2026-50439	Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-42900	Microsoft Windows App Store Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-49784	Microsoft Windows App Store Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50356	Microsoft Windows App Store Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-49165	Microsoft Windows App Store Information Disclosure Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-54993	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58610	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50655	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-56189	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-57090	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-57094	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-57087	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-57092	Microsoft Windows VMSwitch Elevation of Privilege Vulnerability	Exploitation Less Likely	No	9.9
CVE-2026-50359	Microsoft XML Core Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-57097	Microsoft XML Security Feature Bypass Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-50346	Netlogon RPC Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50402	NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-54989	Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50365	Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-50474	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-58594	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56190	Remote Desktop Protocol Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-49783	Secure Boot Security Feature Bypass Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-42990	SQL Server ODBC driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-49168	Storage Spaces Direct Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-49180	Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50455	Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-58601	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Less Likely	No	7.8
CVE-2026-49805	Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-50297	Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-50325	Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-50489	Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-57095	Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.2
CVE-2026-56184	Win32k Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5

CVE-2026-50432	Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability	Exploitation Less Likely	No	5.3
CVE-2026-54119	Windows Active Directory Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-57976	Windows Active Directory Domain Services Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50366	Windows Active Directory Domain Services Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-49164	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-49178	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-54983	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50695	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50304	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50368	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50324	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Less Likely	No	5.9
CVE-2026-50355	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50411	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50312	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-50462	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-57093	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-34346	Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50400	Windows App Package Installer Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50331	Windows Application Model Core API Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49803	Windows AppX Deployment Extensions Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50351	Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-34328	Windows Audio Service Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50406	Windows Backup Engine Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50364	Windows Backup Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-50661	Windows BitLocker Security Feature Bypass Vulnerability	Exploitation Less Likely	Yes	6.1
CVE-2026-42975	Windows Bluetooth Port Driver Remote Code Execution	Exploitation Less Likely	No	8.0
CVE-2026-58538	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58638	Windows Boot Loader Security Feature Bypass Vulnerability	Exploitation More Likely	No	6.0
CVE-2026-58637	Windows Client-Side Caching Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50384	Windows Clip Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-49183	Windows Clipboard Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50689	Windows Clipboard Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50374	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.3
CVE-2026-58536	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-58613	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50401	Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50697	Windows Common Log File System Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50667	Windows Common Log File System Driver Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50421	Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50352	Windows Cryptographic Services Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50302	Windows Cryptographic Services Security Feature Bypass Vulnerability	Exploitation Unlikely	No	4.2
CVE-2026-50347	Windows Data.dll Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49181	Windows DHCP Client Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50683	Windows DHCP Client Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-54128	Windows DHCP Client Remote Code Execution Vulnerability	Exploitation More Likely	No	8.4
CVE-2026-58627	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50518	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-50685	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-49807	Windows DirectX Information Disclosure Vulnerability	Exploitation Less Likely	No	6.2
CVE-2026-49175	Windows DNS Client Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50426	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-50300	Windows DWM Core Library Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50437	Windows DWM Core Library Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-34348	Windows Event Logging Service Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50502	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-33842	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-40422	Windows File Explorer Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-41087	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50473	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50442	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50389	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50456	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-57084	Windows File Explorer Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-57091	Windows File History Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50405	Windows Filtering Platform Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49172	Windows FTP Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-50387	Windows GDI Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-54122	Windows GDI+ Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.4
CVE-2026-49796	Windows GDI+ Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50380	Windows GDI+ Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.6

CVE-2026-58609	Windows Graphics Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50391	Windows Group Policy Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50310	Windows Human Interface Device Information Disclosure Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-50485	Windows Hyper-V Denial of Service Vulnerability	Exploitation Less Likely	No	4.5
CVE-2026-54129	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50680	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-58534	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50490	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-58540	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50425	Windows Internal System User Profile Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50293	Windows Internal Task Bar Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49167	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-54132	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-49795	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-49798	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	9.3
CVE-2026-50354	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-50332	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50377	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50390	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-50423	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50397	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50399	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50459	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50477	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50478	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50484	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50673	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58532	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50294	Windows Kernel Information Disclosure Vulnerability	Exploitation Less Likely	No	6.2
CVE-2026-50316	Windows Kernel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50419	Windows Kernel Information Disclosure Vulnerability	Exploitation Unlikely	No	3.3
CVE-2026-50463	Windows Kernel Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50475	Windows Kernel Information Disclosure Vulnerability	Exploitation More Likely	No	5.5
CVE-2026-50429	Windows Kernel Information Disclosure Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-58614	Windows Kernel Security Feature Bypass Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-58545	Windows Kernel Security Feature Bypass Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50378	Windows Key Guard Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50303	Windows Key Guard Security Feature Bypass Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-40378	Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-49799	Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50371	Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50358	Windows Media Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50433	Windows Media Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-34349	Windows Media Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50394	Windows Media Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50415	Windows Media Information Disclosure Vulnerability	Exploitation Less Likely	No	5.3
CVE-2026-57083	Windows Media Photo Codec Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-54115	Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50447	Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-50505	Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-58635	Windows Narrator Braille Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50500	Windows Netlogon Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50476	Windows Network Connections Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50450	Windows Network Connections Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56650	Windows Network File System Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56649	Windows Network File System Remote Code Execution Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-50470	Windows Network Policy Server SNMP Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50496	Windows Network Policy Server SNMP Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-56194	Windows NFS Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56648	Windows NFS Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50337	Windows Notification Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49789	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-50412	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50422	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50672	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-56175	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56182	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50341	Windows NTFS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-58640	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-49184	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.4
CVE-2026-49797	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50308	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50386	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50309	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50313	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50388	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50448	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50471	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50461	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50417	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50482	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-50494	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50344	Windows OLE Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50686	Windows OLE Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-50335	Windows Operating Systems Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-54987	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50435	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50409	Windows Overlay Filter Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-40400	Windows PowerShell Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-55004	Windows Print Configuration Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50499	Windows Print Spooler Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50383	Windows Print Spooler Information Disclosure Vulnerability	Exploitation Less Likely	No	6.1
CVE-2026-57085	Windows Print Spooler Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-58608	Windows Print Spooler Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50469	Windows Projected File System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50434	Windows Push Notification Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50339	Windows Push Notification Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50430	Windows Push Notification Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50334	Windows Push Notification Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50363	Windows Push Notifications Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50431	Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50372	Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-54982	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-54995	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-50666	Windows Remote Access Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56647	Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50330	Windows Remote Desktop Client Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50376	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50504	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-58533	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-58535	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-58546	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-58539	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-55003	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-57979	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50445	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50497	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-54126	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-57982	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50369	Windows Remote Desktop Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-58626	Windows Remote Desktop Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-50318	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50407	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50357	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50441	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50668	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-54109	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49792	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49793	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50362	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50492	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-58530	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49791	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-50451	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-57096	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50452	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50348	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50410	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50449	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50460	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-50457	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50486	Windows Runtime Elevation of Privilege Vulnerability	N/A	No	7.8
CVE-2026-54125	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50373	Windows Search Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-44806	Windows Secure Channel Denial of Service Vulnerability	Exploitation Less Likely	No	5.3
CVE-2026-50681	Windows Secure Channel Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-56186	Windows Secure Channel Information Disclosure Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-42982	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50694	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-50367	Windows Sensor Data Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58619	Windows Sensor Data Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50311	Windows Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56188	Windows Server Network driver Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8

CVE-2026-50444	Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50328	Windows Server Update Service (WSUS) Tampering Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-58531	Windows SMB Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.5
CVE-2026-54997	Windows SMB Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-49801	Windows SMB Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50690	Windows SMB Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-56168	Windows SMB Server Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50360	Windows SMB Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-57089	Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50333	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50298	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-49171	Windows Speech Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-49170	Windows StateRepository API Server file Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-58526	Windows Storage Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50299	Windows Storage Spaces Direct Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-50306	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50307	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-49177	Windows TCP/IP Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-54999	Windows TCP/IP Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50669	Windows Telephony Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-54124	Windows Terminal Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50350	Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50326	Windows Unified Consent System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49790	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-50498	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58547	Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-49794	Windows USB Audio Class Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-50453	Windows USB Audio Class Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	6.1
CVE-2026-58528	Windows USB Audio Class Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-50321	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50479	Windows USB Hub Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49804	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.6
CVE-2026-49176	Windows WalletService Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49800	Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50480	Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56173	Windows WebView Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-58632	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-54107	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-54986	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-54112	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-54114	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50670	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50688	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-56176	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58628	Windows Wireless Network Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50509	Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8

Microsoft Dynamics vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-55944	Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8

Microsoft Office vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-50678	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	6.6
CVE-2026-54988	Microsoft Excel Information Disclosure Vulnerability	Exploitation Unlikely	No	6.1
CVE-2026-48580	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50408	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55046	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55138	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55054	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-55122	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-55898	Microsoft Excel Information Disclosure Vulnerability	Exploitation Unlikely	No	6.1
CVE-2026-50675	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55899	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55948	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-58618	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-47642	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55024	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55025	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-55031	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55048	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55029	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55039	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55041	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55136	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-55141	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55036	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55044	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55037	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55058	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55137	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55053	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55131	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-54131	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55947	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55949	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56156	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56193	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-55023	Microsoft Office Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-55026	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.2
CVE-2026-55027	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55028	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55047	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55035	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55057	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55042	Microsoft Office Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-55139	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50665	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56192	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-56195	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55121	Microsoft Office Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-47290	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50301	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50314	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50467	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55017	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55018	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55022	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55125	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55045	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.4
CVE-2026-55049	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55129	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55056	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55140	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55133	Microsoft OneNote Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55043	Microsoft PowerPoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55123	Microsoft PowerPoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55120	Microsoft PowerPoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55052	Microsoft SharePoint Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-58277	Microsoft SharePoint Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50522	Microsoft SharePoint Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-58644	Microsoft SharePoint Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-56164	Microsoft SharePoint Server Elevation of Privilege Vulnerability	Exploitation Detected	No	5.3
CVE-2026-55051	Microsoft SharePoint Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-55040	Microsoft SharePoint Server Security Feature Bypass Vulnerability	Exploitation More Likely	No	9.1
CVE-2026-54108	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-55016	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-55019	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Unlikely	No	4.6
CVE-2026-55020	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Unlikely	No	4.6
CVE-2026-55021	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Unlikely	No	7.3
CVE-2026-55030	Microsoft SharePoint Server Spoofing Vulnerability	N/A	No	4.6
CVE-2026-55034	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-55126	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-55135	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-56157	Microsoft SharePoint Server Spoofing Vulnerability	Exploitation Less Likely	No	5.4
CVE-2026-55050	Microsoft Word Information Disclosure Vulnerability	N/A	No	5.5
CVE-2026-55124	Microsoft Word Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55142	Microsoft Word Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-55032	Microsoft Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55033	Microsoft Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55127	Microsoft Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55055	Microsoft Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55038	Microsoft Word Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-55132	Microsoft Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55134	Microsoft Word Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-55128	Microsoft Word Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-55130	Microsoft Word Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50387	Windows GDI Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8

Open Source Software vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-40553	Stack-based buffer overflow in gawk	n/a	No
CVE-2026-40469	Heap buffer overflow in gawk	n/a	No
CVE-2026-40468	Heap buffer overflow in gawk	n/a	No
CVE-2026-40467	Use after free in gawk	n/a	No
CVE-2026-57968	Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-57973	Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability	Exploitation Less Likely	No	6.3

Other vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-50663	Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50510	GitHub Copilot Remote Code Execution Vulnerability	N/A	No	7.8
CVE-2026-55010	Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-55145	Outlook Copilot Tampering Vulnerability	N/A	No	6.3

Server Software vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-55006	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55009	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-55005	Microsoft Exchange Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-55008	Microsoft Exchange Server Spoofing Vulnerability	Exploitation More Likely	No	9.6

SQL Server vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-56642	Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-58647	Microsoft PowerBI Report Server Spoofing Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-47296	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55002	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-47295	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50468	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-54116	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-54117	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-54118	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8

System Center vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-50658	Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-56178	Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50657	Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-55011	Microsoft Defender Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55012	Microsoft Defender Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8

Windows vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-54121	Active Directory Certificate Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50682	Active Directory Denial of Service Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-55001	Active Directory Domain Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50647	Active Directory Federation Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50684	Active Directory Federation Server Spoofing Vulnerability	N/A	No	4.8
CVE-2026-56155	Active Directory Federation Services Elevation of Privilege Vulnerability	Exploitation Detected	No	7.8
CVE-2026-50488	Clipboard User Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50491	Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50381	Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50427	Content Delivery Manager Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50692	Desktop Window Manager Elevation of Privilege Vulnerability	N/A	No	8.8
CVE-2026-58633	Desktop Window Manager Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-58634	Desktop Window Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-48564	DHCP Server Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50370	DHCP Server Service Remote Code Execution Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-56159	DHCP Server Service Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-50296	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50375	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	6.3
CVE-2026-50353	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50493	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56643	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56644	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58629	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50382	DirectX Graphics Kernel Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-49174	DNS Client Tampering Vulnerability	Exploitation Unlikely	No	6.1
CVE-2026-50495	DNS Client Tampering Vulnerability	Exploitation Less Likely	No	6.1
CVE-2026-57088	Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49787	HTTP.sys Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50420	HTTP.sys Information Disclosure Vulnerability	Exploitation Less Likely	No	6.2
CVE-2026-49788	HTTP/2 Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50696	Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-49162	Microsoft Brokering File System Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50305	Microsoft Brokering File System Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50361	Microsoft Brokering File System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50466	Microsoft Brokering File System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50458	Microsoft Brokering File System Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50329	Microsoft DWM Core Library Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-58541	Microsoft DWM Core Library Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50343	Microsoft Install Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-54992	Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability	Exploitation More Likely	No	8.4
CVE-2026-50439	Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-58537	Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-42900	Microsoft Windows App Store Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-49784	Microsoft Windows App Store Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50356	Microsoft Windows App Store Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-49165	Microsoft Windows App Store Information Disclosure Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-54993	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58610	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50655	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-56189	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-57090	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-57094	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-57087	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-57092	Microsoft Windows VMSwitch Elevation of Privilege Vulnerability	Exploitation Less Likely	No	9.9
CVE-2026-50359	Microsoft XML Core Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-57097	Microsoft XML Security Feature Bypass Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-50346	Netlogon RPC Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50402	NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-54989	Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50365	Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-54990	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-50474	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-58594	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56190	Remote Desktop Protocol Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-49783	Secure Boot Security Feature Bypass Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-42990	SQL Server ODBC driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-49168	Storage Spaces Direct Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-49180	Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50455	Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-54111	Universal Print Management Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-58543	Universal Print Management Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.3
CVE-2026-58601	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Less Likely	No	7.8
CVE-2026-49805	Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-50297	Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-50325	Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-50489	Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-57095	Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.2
CVE-2026-50416	Win32k Information Disclosure Vulnerability	Exploitation Less Likely	No	3.3
CVE-2026-56184	Win32k Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5

CVE-2026-50432	Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability	Exploitation Less Likely	No	5.3
CVE-2026-54119	Windows Active Directory Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-57976	Windows Active Directory Domain Services Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50366	Windows Active Directory Domain Services Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-49164	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-49178	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-58529	Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-54983	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50695	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50304	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50368	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50324	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Less Likely	No	5.9
CVE-2026-50355	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50411	Windows Active Directory Federation Services Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-58631	Windows Admin Center (WAC) Remote Code Execution Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-56196	Windows Admin Center (WAC) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56197	Windows Admin Center (WAC) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56169	Windows Admin Center Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-57107	Windows Admin Center Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56185	Windows Admin Center Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50312	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-50462	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-57093	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-34346	Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-48572	Windows App Package Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-48571	Windows App Package Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50400	Windows App Package Installer Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50331	Windows Application Model Core API Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49803	Windows AppX Deployment Extensions Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50351	Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50440	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-34328	Windows Audio Service Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50406	Windows Backup Engine Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50364	Windows Backup Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-50661	Windows BitLocker Security Feature Bypass Vulnerability	Exploitation Less Likely	Yes	6.1
CVE-2026-42975	Windows Bluetooth Port Driver Remote Code Execution	Exploitation Less Likely	No	8.0
CVE-2026-58538	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58638	Windows Boot Loader Security Feature Bypass Vulnerability	Exploitation More Likely	No	6.0
CVE-2026-58637	Windows Client-Side Caching Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50384	Windows Clip Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-49183	Windows Clipboard Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50689	Windows Clipboard Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50374	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.3
CVE-2026-58536	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-58613	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50401	Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50697	Windows Common Log File System Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50667	Windows Common Log File System Driver Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50421	Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50428	Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-50352	Windows Cryptographic Services Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50302	Windows Cryptographic Services Security Feature Bypass Vulnerability	Exploitation Unlikely	No	4.2
CVE-2026-55144	Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-50347	Windows Data.dll Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49181	Windows DHCP Client Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50683	Windows DHCP Client Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-54128	Windows DHCP Client Remote Code Execution Vulnerability	Exploitation More Likely	No	8.4
CVE-2026-58627	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50518	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-50685	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-49807	Windows DirectX Information Disclosure Vulnerability	Exploitation Less Likely	No	6.2
CVE-2026-49175	Windows DNS Client Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50487	Windows DNS Client Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-50465	Windows DNS Client Tampering Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-49169	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-50426	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-50424	Windows Domain Controller Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50300	Windows DWM Core Library Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50437	Windows DWM Core Library Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-34348	Windows Event Logging Service Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50502	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-33842	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-40422	Windows File Explorer Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-41087	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50473	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50442	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50389	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50456	Windows File Explorer Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-57084	Windows File Explorer Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-57091	Windows File History Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50405	Windows Filtering Platform Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49172	Windows FTP Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-50387	Windows GDI Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-54122	Windows GDI+ Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.4
CVE-2026-49796	Windows GDI+ Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50380	Windows GDI+ Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.6
CVE-2026-50483	Windows Graphics Component Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-58609	Windows Graphics Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50391	Windows Group Policy Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50310	Windows Human Interface Device Information Disclosure Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-50485	Windows Hyper-V Denial of Service Vulnerability	Exploitation Less Likely	No	4.5
CVE-2026-54129	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-54127	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.4
CVE-2026-50680	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-50315	Windows Image Acquisition Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-58534	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50490	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-58540	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50425	Windows Internal System User Profile Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50293	Windows Internal Task Bar Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49167	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-49173	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-54132	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-49795	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-49798	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	9.3
CVE-2026-49808	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50354	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-50332	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50377	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50390	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-50423	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50397	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50436	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50399	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50459	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50477	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50478	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50484	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50673	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58532	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50294	Windows Kernel Information Disclosure Vulnerability	Exploitation Less Likely	No	6.2

CVE-2026-50316	Windows Kernel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50419	Windows Kernel Information Disclosure Vulnerability	Exploitation Unlikely	No	3.3
CVE-2026-50463	Windows Kernel Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50475	Windows Kernel Information Disclosure Vulnerability	Exploitation More Likely	No	5.5
CVE-2026-50429	Windows Kernel Information Disclosure Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-58614	Windows Kernel Security Feature Bypass Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-58545	Windows Kernel Security Feature Bypass Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-58602	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50393	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50396	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50378	Windows Key Guard Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50303	Windows Key Guard Security Feature Bypass Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-40378	Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-49799	Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50371	Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-58544	Windows Management Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50404	Windows Media Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50358	Windows Media Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50336	Windows Media Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50398	Windows Media Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-50414	Windows Media Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50379	Windows Media Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50433	Windows Media Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50676	Windows Media Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50677	Windows Media Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-34349	Windows Media Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50394	Windows Media Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50415	Windows Media Information Disclosure Vulnerability	Exploitation Less Likely	No	5.3
CVE-2026-57083	Windows Media Photo Codec Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50327	Windows Media Remote Code Execution Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-58542	Windows Media Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-54115	Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50447	Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-50505	Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50342	Windows MIDI Service Module Elevation of Privileges Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56183	Windows MIDI Service Module Elevation of Privileges Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-56187	Windows MIDI Service Module Elevation of Privileges Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-58635	Windows Narrator Braille Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50500	Windows Netlogon Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-56181	Windows Network Address Translation (NAT) Spoofing Vulnerability	Exploitation Less Likely	No	8.3
CVE-2026-50476	Windows Network Connections Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50450	Windows Network Connections Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56650	Windows Network File System Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56649	Windows Network File System Remote Code Execution Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-50470	Windows Network Policy Server SNMP Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-50496	Windows Network Policy Server SNMP Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-56194	Windows NFS Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56648	Windows NFS Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50337	Windows Notification Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49789	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-50412	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50422	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50672	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-56175	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56182	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50341	Windows NTFS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-58640	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-49184	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.4
CVE-2026-49797	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50308	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50386	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50309	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50313	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50388	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50448	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50471	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50461	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50417	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50482	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-50494	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50344	Windows OLE Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50686	Windows OLE Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-50335	Windows Operating Systems Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50317	Windows Operating Systems Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-54987	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50435	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50409	Windows Overlay Filter Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-40400	Windows PowerShell Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-49166	Windows Print Configuration Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55004	Windows Print Configuration Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50499	Windows Print Spooler Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50383	Windows Print Spooler Information Disclosure Vulnerability	Exploitation Less Likely	No	6.1
CVE-2026-57085	Windows Print Spooler Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-58608	Windows Print Spooler Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50469	Windows Projected File System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50434	Windows Push Notification Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50339	Windows Push Notification Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50430	Windows Push Notification Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50334	Windows Push Notification Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-44800	Windows Push Notifications Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50363	Windows Push Notifications Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50431	Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50372	Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-54982	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-54995	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-50666	Windows Remote Access Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56647	Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50330	Windows Remote Desktop Client Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50376	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50504	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-58533	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-58535	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-58546	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-58539	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-55003	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-57979	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50445	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50497	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-54126	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-57982	Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50369	Windows Remote Desktop Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-58626	Windows Remote Desktop Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-55014	Windows Remote Help Defense Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50318	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50407	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50357	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50441	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50668	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-54109	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49792	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49793	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50362	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50492	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-50501	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-58530	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49791	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-50451	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-57096	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50323	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50452	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50348	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50345	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50322	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50340	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.5
CVE-2026-50410	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50449	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50460	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-50403	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-50385	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-50413	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50457	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50486	Windows Runtime Elevation of Privilege Vulnerability	N/A	No	7.8
CVE-2026-50503	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-54125	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58527	Windows Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50373	Windows Search Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50679	Windows Search Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-44806	Windows Secure Channel Denial of Service Vulnerability	Exploitation Less Likely	No	5.3
CVE-2026-50681	Windows Secure Channel Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-56186	Windows Secure Channel Information Disclosure Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-42982	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50392	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50694	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-50367	Windows Sensor Data Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58619	Windows Sensor Data Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50311	Windows Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56188	Windows Server Network driver Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-50444	Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50328	Windows Server Update Service (WSUS) Tampering Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-58531	Windows SMB Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.5
CVE-2026-54997	Windows SMB Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-49801	Windows SMB Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5

CVE-2026-50690	Windows SMB Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-56168	Windows SMB Server Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-50360	Windows SMB Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-57089	Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-50333	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50298	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-49171	Windows Speech Runtime Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-49170	Windows StateRepository API Server file Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-58526	Windows Storage Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50299	Windows Storage Spaces Direct Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-50418	Windows System Secure Feature Bypass Vulnerability	Exploitation Unlikely	No	5.1
CVE-2026-50306	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50307	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-49177	Windows TCP/IP Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-54999	Windows TCP/IP Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50669	Windows Telephony Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-54124	Windows Terminal Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50350	Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-50326	Windows Unified Consent System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-49790	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-50498	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58547	Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-49794	Windows USB Audio Class Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-50453	Windows USB Audio Class Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	6.1
CVE-2026-58528	Windows USB Audio Class Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-50321	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-50479	Windows USB Hub Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-55000	Windows USB Print Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-54991	Windows USB Print Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-54996	Windows USB Print Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-49802	Windows USB Print Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-49806	Windows USB Print Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-50674	Windows USB Print Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-49804	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.6
CVE-2026-50454	Windows User Interface Core Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-49176	Windows WalletService Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-49800	Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50480	Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-56173	Windows WebView Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-58632	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-54107	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-54986	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-54112	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-54114	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50670	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-50688	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-50687	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-56176	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58628	Windows Wireless Network Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-50295	Windows Zero Trust DNS Security Feature Bypass Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-50509	Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8

Zero-Day Vulnerabilities: Known Exploited

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-56155	Active Directory Federation Services Elevation of Privilege Vulnerability	Exploitation Detected	No	7.8
CVE-2026-56164	Microsoft SharePoint Server Elevation of Privilege Vulnerability	Exploitation Detected	No	5.3

Zero-Day Vulnerabilities: Publicly Disclosed (No known exploitation)

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-50661	Windows BitLocker Security Feature Bypass Vulnerability	Exploitation Less Likely	Yes	6.1

Critical RCEs

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-56159	DHCP Server Service Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-48561	Microsoft Copilot Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.6
CVE-2026-55944	Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-55008	Microsoft Exchange Server Spoofing Vulnerability	Exploitation More Likely	No	9.6
CVE-2026-50522	Microsoft SharePoint Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-58644	Microsoft SharePoint Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-55040	Microsoft SharePoint Server Security Feature Bypass Vulnerability	Exploitation More Likely	No	9.1
CVE-2026-57092	Microsoft Windows VMSwitch Elevation of Privilege Vulnerability	Exploitation Less Likely	No	9.9
CVE-2026-55010	Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-54990	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-56190	Remote Desktop Protocol Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-42990	SQL Server ODBC driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-50518	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-49172	Windows FTP Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-50380	Windows GDI+ Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.6
CVE-2026-49798	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	9.3
CVE-2026-50447	Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-56188	Windows Server Network driver Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8

SecurityWeek RSS Feed
The Shift Toward Business-Aligned Risk Management 6 July 2026 at 11:20

The Shift Toward Business-Aligned Risk Management

SecurityWeek RSS Feed

By: Steve Durbin

6 July 2026 at 11:20

Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.

The post The Shift Toward Business-Aligned Risk Management appeared first on SecurityWeek.

CyberScoop
Finding vulnerabilities was never the hard part 6 July 2026 at 05:00

Finding vulnerabilities was never the hard part

CyberScoop

By: Greg Otto

6 July 2026 at 05:00

I keep hearing the same frustration when I talk with security leaders. The real problem sitting on their desk isn’t finding vulnerabilities. It’s deciding which ones actually matter.

The industry has spent billions on better visibility. We’ve convinced ourselves that if we could just discover more vulnerabilities, collect more data, and ingest more threat intelligence, we’d become more secure. But look around. Organizations still aren’t more secure. They’re just overwhelmed.

Then AI arrived and changed the game entirely. In a matter of months, vulnerability discovery accelerated dramatically. AI systems review code faster than human researchers ever could. They identify weaknesses at unprecedented scale. They scan continuously without the limitations of time, staffing, or attention. The headlines have been everywhere. Government leaders are reevaluating AI laws. CEOs are tossing and turning at night.

But we are focusing on the wrong issue. None of this is actually solving what matters most.

For years, security teams have been drowning in findings. Every new threat feed promised greater visibility. What arrived instead was noise—more data, more alerts, more dashboards, more vulnerabilities. Rarely clarity. Now AI is pouring gasoline on that fire.

The conversations around AI in cybersecurity often get stuck in the wrong place. People debate whether it will help defenders move faster or enable attackers more easily. Both matter, but they are not the core issue.

The real consequence of AI is that it’s exposing something organizations have avoided facing. A vulnerability is not risk, it’s just a clue. Risk emerges when information connects to context: how critical the affected asset is, what controls surround it, how likely exploitation is, the business processes it supports, and what happens operationally if it fails.

Without that context, prioritization becomes impossible. Resources get spent on low-risk issues while mission-critical, vulnerabilities sit unfixed.

Now AI is now making the data volume problem almost impossible to comprehend. An enterprise working with hundreds of software vendors, cloud providers, contractors, and technology partners must investigate every relationship. It’s like a cybersecurity nesting doll where AI continuously identifies vulnerabilities across that entire ecosystem, every minute of every day.

The real challenge today isn’t discovering weaknesses. It’s determining which of tens of thousands of newly discovered weaknesses could actually disrupt operations, impact customers, halt revenue, or create regulatory exposure. Most organizations can’t answer that question quickly.

Some still rank risk using severity scores built for technical teams rather than business leaders. Others rely on manual triage that was already struggling before AI. Many still measure security maturity by how many findings they identify rather than the speed and accuracy of their decisions.

These approaches don’t work anymore. They probably didn’t work yesterday either.

What’s uncomfortable to acknowledge is that AI isn’t creating a cybersecurity crisis. It is revealing one that’s existed for years. The organizations that succeed in this an AI world will transform discovery into judgment faster than their competitors. When AI can find nearly every weakness, security belongs to those who know what to act on. It belongs to those who can connect data to business reality.

That’s the real edge. That’s what separates secure organizations from those that are just collecting more findings.

The post Finding vulnerabilities was never the hard part appeared first on CyberScoop.