Threat intelligence, Threat Research
Microsoft Security Bulletin Coverage for July 2026
Overview
Microsoft’s July 2026 Patch Tuesday has 576 vulnerabilities, of which 255 are Elevation of Privilege. Microsoft had said last week in this blog that “As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release”. This month’s patch Tuesday is one of the biggest ever with 576 vulnerabilities. SonicWall Capture Labs threat research team has analyzed and addressed Microsoft’s security advisories for the month of July 2026 and has produced coverage for 35 of the reported vulnerabilities.
Vulnerabilities with Detections
CVE | CVE Title | Signature |
| CVE-2026-49170 | Windows StateRepository API Server file Elevation of Privilege Vulnerability | ASPY 7241 Exploit-exe exe.MP_535 |
| CVE-2026-49795 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 7242 Exploit-exe exe.MP_536 |
| CVE-2026-49798 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 7243 Exploit-exe exe.MP_537 |
| CVE-2026-49800 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | ASPY 7257 Exploit-exe exe.MP_561 |
| CVE-2026-49805 | Win32k Elevation of Privilege Vulnerability | ASPY 7259 Exploit-exe exe.MP_563 |
| CVE-2026-50297 | Win32k Elevation of Privilege Vulnerability | ASPY 7258 Exploit-exe exe.MP_562 |
| CVE-2026-50325 | Win32k Elevation of Privilege Vulnerability | ASPY 700 Exploit-exe exe.MP_559 |
| CVE-2026-50327 | Windows Media Remote Code Execution Vulnerability | ASPY 7255 Malformed-avi avi.MP_1 |
| CVE-2026-50329 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | ASPY 7244 Exploit-exe exe.MP_538 |
| CVE-2026-50332 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 7245 Exploit-exe exe.MP_539 |
| CVE-2026-50343 | Microsoft Install Service Elevation of Privilege Vulnerability | ASPY 7246 Exploit-exe exe.MP_540 |
| CVE-2026-50351 | Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability | ASPY 7247 Exploit-exe exe.MP_541 |
| CVE-2026-50375 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | ASPY 7248 Exploit-exe exe.MP_542 |
| CVE-2026-50387 | Windows GDI Elevation of Privilege Vulnerability | ASPY 7249 Exploit-exe exe.MP_543 |
| CVE-2026-50390 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 7250 Exploit-exe exe.MP_544 |
| CVE-2026-50420 | HTTP.sys Information Disclosure Vulnerability | ASPY 7251 Exploit-exe exe.MP_545 |
| CVE-2026-50423 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 7252 Exploit-exe exe.MP_546 |
| CVE-2026-50433 | Windows Media Elevation of Privilege Vulnerability | ASPY 7253 Exploit-exe exe.MP_547 |
| CVE-2026-50436 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 7254 Exploit-exe exe.MP_548 |
| CVE-2026-50454 | Windows User Interface Core Elevation of Privilege Vulnerability | ASPY 7256 Exploit-exe exe.MP_560 |
| CVE-2026-50475 | Windows Kernel Information Disclosure Vulnerability | ASPY 699 Exploit-exe exe.MP_558 |
| CVE-2026-50476 | Windows Network Connections Service Elevation of Privilege Vulnerability | ASPY 698 Exploit-exe exe.MP_557 |
| CVE-2026-50489 | Win32k Elevation of Privilege Vulnerability | ASPY 697 Exploit-exe exe.MP_556 |
| CVE-2026-50518 | Windows DHCP Server Remote Code Execution Vulnerability | IPS 4621 Windows DHCP Server Remote Code Execution (CVE-2026-50518) |
| CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability | IPS 4622 Microsoft SharePoint Remote Code Execution (CVE-2026-50522) |
| CVE-2026-50655 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | ASPY 696 Exploit-exe exe.MP_555 |
| CVE-2026-50667 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ASPY 695 Exploit-exe exe.MP_554 |
| CVE-2026-50688 | Windows Win32k Elevation of Privilege Vulnerability | ASPY 694 Exploit-exe exe.MP_553 |
| CVE-2026-54114 | Windows Win32k Elevation of Privilege Vulnerability | ASPY 693 Exploit-exe exe.MP_552 |
| CVE-2026-54986 | Windows Win32k Elevation of Privilege Vulnerability | ASPY 692 Exploit-exe exe.MP_551 |
| CVE-2026-54992 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | IPS 4623 Microsoft Message Queuing RCE (CVE-2026-54992) |
| CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | IPS 4624 Microsoft SharePoint Server Authentication Bypass (CVE-2026-56164) |
| CVE-2026-57091 | Windows File History Service Elevation of Privilege Vulnerability | ASPY 691 Exploit-exe exe.MP_550 |
| CVE-2026-58531 | Windows SMB Elevation of Privilege Vulnerability | IPS 22290 Windows SMB Server Elevation of Privilege (CVE-2026-58531) |
| CVE-2026-58536 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ASPY 690 Exploit-exe exe.MP_549 |
Release Breakdown
The vulnerabilities can be classified into the following categories:
For July there are 63 critical and 511 important vulnerabilities.
Microsoft tracks vulnerabilities that are being actively exploited at the time of discovery and those that have been disclosed publicly before the patch Tuesday release for each month. The above chart displays these metrics as seen each month.
Release Detailed Breakdown
AI Derived Harm
| CVE | CVE Title |
| CVE-2026-55145 | Outlook Copilot Tampering Vulnerability |
Denial of Service Vulnerabilities
| CVE | CVE Title |
| CVE-2026-40378 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
| CVE-2026-44806 | Windows Secure Channel Denial of Service Vulnerability |
| CVE-2026-45646 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-47302 | .NET Denial of Service Vulnerability |
| CVE-2026-49787 | HTTP.sys Denial of Service Vulnerability |
| CVE-2026-49788 | HTTP/2 Denial of Service Vulnerability |
| CVE-2026-49799 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
| CVE-2026-50304 | Windows Active Directory Federation Services Denial of Service Vulnerability |
| CVE-2026-50324 | Windows Active Directory Federation Services Denial of Service Vulnerability |
| CVE-2026-50355 | Windows Active Directory Federation Services Denial of Service Vulnerability |
| CVE-2026-50366 | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-50368 | Windows Active Directory Federation Services Denial of Service Vulnerability |
| CVE-2026-50411 | Windows Active Directory Federation Services Denial of Service Vulnerability |
| CVE-2026-50424 | Windows Domain Controller Denial of Service Vulnerability |
| CVE-2026-50432 | Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability |
| CVE-2026-50485 | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2026-50506 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-50524 | .NET Framework Denial of Service Vulnerability |
| CVE-2026-50525 | .NET Denial of Service Vulnerability |
| CVE-2026-50527 | .NET Framework Denial of Service Vulnerability |
| CVE-2026-50647 | Active Directory Federation Server Denial of Service Vulnerability |
| CVE-2026-50648 | .NET Framework Denial of Service Vulnerability |
| CVE-2026-50651 | .NET Denial of Service Vulnerability |
| CVE-2026-50652 | Azure Active Directory Denial of Service Vulnerability |
| CVE-2026-50653 | Azure Active Directory Denial of Service Vulnerability |
| CVE-2026-50682 | Active Directory Denial of Service Vulnerability |
| CVE-2026-50695 | Windows Active Directory Federation Services Denial of Service Vulnerability |
| CVE-2026-50696 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
| CVE-2026-54119 | Windows Active Directory Denial of Service Vulnerability |
| CVE-2026-54983 | Windows Active Directory Federation Services Denial of Service Vulnerability |
| CVE-2026-56168 | Windows SMB Server Denial of Service Vulnerability |
| CVE-2026-56170 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-57108 | .NET Denial of Service Vulnerability |
| CVE-2026-57976 | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-58627 | Windows DHCP Server Denial of Service Vulnerability |
Elevation of Privilege Vulnerabilities
| CVE | CVE Title |
| CVE-2026-26145 | Microsoft Azure Synapse Elevation of Privilege Vulnerability |
| CVE-2026-41106 | Microsoft 365 Copilot Elevation of Privilege Vulnerability |
| CVE-2026-42900 | Microsoft Windows App Store Elevation of Privilege Vulnerability |
| CVE-2026-42982 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-44800 | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-45499 | Azure OpenAI Elevation of Privilege Vulnerability |
| CVE-2026-47295 | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-47296 | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-47300 | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-47301 | Configuration Manager Elevation of Privilege Vulnerability |
| CVE-2026-47303 | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-47632 | Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability |
| CVE-2026-48571 | Windows App Package Installer Elevation of Privilege Vulnerability |
| CVE-2026-48572 | Windows App Package Installer Elevation of Privilege Vulnerability |
| CVE-2026-48581 | Surface Broker SDMA Elevation of Privilege Vulnerability |
| CVE-2026-49162 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-49166 | Windows Print Configuration Elevation of Privilege Vulnerability |
| CVE-2026-49167 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-49168 | Storage Spaces Direct Elevation of Privilege Vulnerability |
| CVE-2026-49170 | Windows StateRepository API Server file Elevation of Privilege Vulnerability |
| CVE-2026-49171 | Windows Speech Runtime Elevation of Privilege Vulnerability |
| CVE-2026-49173 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-49175 | Windows DNS Client Elevation of Privilege Vulnerability |
| CVE-2026-49176 | Windows WalletService Elevation of Privilege Vulnerability |
| CVE-2026-49181 | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-49183 | Windows Clipboard Server Elevation of Privilege Vulnerability |
| CVE-2026-49784 | Microsoft Windows App Store Elevation of Privilege Vulnerability |
| CVE-2026-49789 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-49790 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-49791 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
| CVE-2026-49795 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-49798 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-49800 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability |
| CVE-2026-49802 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-49803 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
| CVE-2026-49804 | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-49805 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-49806 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-49808 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50293 | Windows Internal Task Bar Elevation of Privilege Vulnerability |
| CVE-2026-50296 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50297 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-50298 | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-50305 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-50306 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-50307 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-50311 | Windows Server Elevation of Privilege Vulnerability |
| CVE-2026-50312 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-50315 | Windows Image Acquisition Elevation of Privilege Vulnerability |
| CVE-2026-50317 | Windows Operating Systems Elevation of Privilege Vulnerability |
| CVE-2026-50318 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-50321 | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-50322 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50323 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50325 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-50326 | Windows Unified Consent System Elevation of Privilege Vulnerability |
| CVE-2026-50329 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-50330 | Windows Remote Desktop Client Elevation of Privilege Vulnerability |
| CVE-2026-50331 | Windows Application Model Core API Elevation of Privilege Vulnerability |
| CVE-2026-50332 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50333 | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-50335 | Windows Operating Systems Elevation of Privilege Vulnerability |
| CVE-2026-50336 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50337 | Windows Notification Elevation of Privilege Vulnerability |
| CVE-2026-50338 | Azure Spring Apps Elevation of Privilege Vulnerability |
| CVE-2026-50340 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50342 | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-50343 | Microsoft Install Service Elevation of Privilege Vulnerability |
| CVE-2026-50344 | Windows OLE Elevation of Privilege Vulnerability |
| CVE-2026-50345 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50346 | Netlogon RPC Elevation of Privilege Vulnerability |
| CVE-2026-50348 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50351 | Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability |
| CVE-2026-50353 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50354 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50356 | Microsoft Windows App Store Elevation of Privilege Vulnerability |
| CVE-2026-50358 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50359 | Microsoft XML Core Services Elevation of Privilege Vulnerability |
| CVE-2026-50360 | Windows SMB Server Elevation of Privilege Vulnerability |
| CVE-2026-50361 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-50363 | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-50364 | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2026-50365 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability |
| CVE-2026-50367 | Windows Sensor Data Service Elevation of Privilege Vulnerability |
| CVE-2026-50369 | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-50371 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-50372 | Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
| CVE-2026-50373 | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-50374 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-50375 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50377 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50378 | Windows Key Guard Elevation of Privilege Vulnerability |
| CVE-2026-50379 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50384 | Windows Clip Service Elevation of Privilege Vulnerability |
| CVE-2026-50385 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50387 | Windows GDI Elevation of Privilege Vulnerability |
| CVE-2026-50390 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50391 | Windows Group Policy Elevation of Privilege Vulnerability |
| CVE-2026-50392 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-50393 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| CVE-2026-50396 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| CVE-2026-50397 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50398 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50399 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50400 | Windows App Package Installer Elevation of Privilege Vulnerability |
| CVE-2026-50402 | NTFS Elevation of Privilege Vulnerability |
| CVE-2026-50403 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50404 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50405 | Windows Filtering Platform Elevation of Privilege Vulnerability |
| CVE-2026-50406 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2026-50407 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-50410 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50412 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-50413 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50414 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50421 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
| CVE-2026-50422 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-50423 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50425 | Windows Internal System User Profile Elevation of Privilege Vulnerability |
| CVE-2026-50427 | Content Delivery Manager Elevation of Privilege Vulnerability |
| CVE-2026-50433 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50435 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-50436 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50438 | Microsoft PC Manager Elevation of Privilege Vulnerability |
| CVE-2026-50440 | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-50441 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-50444 | Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability |
| CVE-2026-50449 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50450 | Windows Network Connections Service Elevation of Privilege Vulnerability |
| CVE-2026-50451 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
| CVE-2026-50452 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50454 | Windows User Interface Core Elevation of Privilege Vulnerability |
| CVE-2026-50457 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50458 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-50459 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50460 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50462 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-50466 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-50469 | Windows Projected File System Elevation of Privilege Vulnerability |
| CVE-2026-50476 | Windows Network Connections Service Elevation of Privilege Vulnerability |
| CVE-2026-50477 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50478 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50479 | Windows USB Hub Driver Elevation of Privilege Vulnerability |
| CVE-2026-50480 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability |
| CVE-2026-50484 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50486 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50487 | Windows DNS Client Elevation of Privilege Vulnerability |
| CVE-2026-50488 | Clipboard User Service Elevation of Privilege Vulnerability |
| CVE-2026-50489 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-50490 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-50491 | Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability |
| CVE-2026-50493 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50498 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-50499 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2026-50500 | Windows Netlogon Elevation of Privilege Vulnerability |
| CVE-2026-50503 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-50509 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
| CVE-2026-50650 | .NET Framework Elevation of Privilege Vulnerability |
| CVE-2026-50658 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability |
| CVE-2026-50666 | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2026-50667 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-50668 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-50669 | Windows Telephony Server Elevation of Privilege Vulnerability |
| CVE-2026-50670 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-50672 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-50673 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-50674 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-50676 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50677 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-50679 | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-50680 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-50683 | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-50687 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-50688 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-50689 | Windows Clipboard Server Elevation of Privilege Vulnerability |
| CVE-2026-50692 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-50697 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-54107 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-54111 | Universal Print Management Service Elevation of Privilege Vulnerability |
| CVE-2026-54112 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-54114 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-54115 | Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
| CVE-2026-54121 | Active Directory Certificate Services Elevation of Privilege Vulnerability |
| CVE-2026-54125 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-54127 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-54129 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-54132 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-54986 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-54987 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-54989 | Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability |
| CVE-2026-54991 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-54996 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-54998 | Microsoft Exchange Online Elevation of Privilege Vulnerability |
| CVE-2026-55000 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-55001 | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2026-55002 | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-55004 | Windows Print Configuration Elevation of Privilege Vulnerability |
| CVE-2026-55006 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-55009 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-55014 | Windows Remote Help Defense Elevation of Privilege Vulnerability |
| CVE-2026-55052 | Microsoft SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-56155 | Active Directory Federation Services Elevation of Privilege Vulnerability |
| CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2026-56169 | Windows Admin Center Elevation of Privilege Vulnerability |
| CVE-2026-56173 | Windows WebView Elevation of Privilege Vulnerability |
| CVE-2026-56175 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-56176 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-56178 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability |
| CVE-2026-56182 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-56183 | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-56187 | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-56194 | Windows NFS Server Elevation of Privilege Vulnerability |
| CVE-2026-56643 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-56644 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-56647 | Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability |
| CVE-2026-56648 | Windows NFS Server Elevation of Privilege Vulnerability |
| CVE-2026-56650 | Windows Network File System Elevation of Privilege Vulnerability |
| CVE-2026-57088 | Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability |
| CVE-2026-57091 | Windows File History Service Elevation of Privilege Vulnerability |
| CVE-2026-57092 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability |
| CVE-2026-57093 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-57095 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-57096 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
| CVE-2026-57100 | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability |
| CVE-2026-57107 | Windows Admin Center Elevation of Privilege Vulnerability |
| CVE-2026-57968 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
| CVE-2026-57969 | Azure CycleCloud Elevation of Privilege Vulnerability |
| CVE-2026-58277 | Microsoft SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-58279 | Azure CycleCloud Elevation of Privilege Vulnerability |
| CVE-2026-58526 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-58527 | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2026-58531 | Windows SMB Elevation of Privilege Vulnerability |
| CVE-2026-58532 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-58534 | Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
| CVE-2026-58536 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-58537 | Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability |
| CVE-2026-58538 | Windows Bluetooth Service Elevation of Privilege Vulnerability |
| CVE-2026-58540 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-58541 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-58543 | Universal Print Management Service Elevation of Privilege Vulnerability |
| CVE-2026-58544 | Windows Management Services Elevation of Privilege Vulnerability |
| CVE-2026-58547 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
| CVE-2026-58601 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-58602 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| CVE-2026-58613 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-58617 | M365 Copilot for iOS Elevation of Privilege Vulnerability |
| CVE-2026-58619 | Windows Sensor Data Service Elevation of Privilege Vulnerability |
| CVE-2026-58628 | Windows Wireless Network Manager Elevation of Privilege Vulnerability |
| CVE-2026-58629 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-58632 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-58633 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-58634 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-58635 | Windows Narrator Braille Elevation of Privilege Vulnerability |
| CVE-2026-58636 | Microsoft PC Manager Elevation of Privilege Vulnerability |
| CVE-2026-58637 | Windows Client-Side Caching Elevation of Privilege Vulnerability |
Information Disclosure Vulnerabilities
| CVE | CVE Title |
| CVE-2026-33842 | Windows File Explorer Information Disclosure Vulnerability |
| CVE-2026-34328 | Windows Audio Service Information Disclosure Vulnerability |
| CVE-2026-34346 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability |
| CVE-2026-34348 | Windows Event Logging Service Information Disclosure Vulnerability |
| CVE-2026-34349 | Windows Media Information Disclosure Vulnerability |
| CVE-2026-40422 | Windows File Explorer Information Disclosure Vulnerability |
| CVE-2026-41087 | Windows File Explorer Information Disclosure Vulnerability |
| CVE-2026-47282 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability |
| CVE-2026-48580 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-49165 | Microsoft Windows App Store Information Disclosure Vulnerability |
| CVE-2026-49177 | Windows TCP/IP Information Disclosure Vulnerability |
| CVE-2026-49180 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability |
| CVE-2026-49794 | Windows USB Audio Class Driver Information Disclosure Vulnerability |
| CVE-2026-49801 | Windows SMB Information Disclosure Vulnerability |
| CVE-2026-49807 | Windows DirectX Information Disclosure Vulnerability |
| CVE-2026-50294 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-50300 | Windows DWM Core Library Information Disclosure Vulnerability |
| CVE-2026-50310 | Windows Human Interface Device Information Disclosure Vulnerability |
| CVE-2026-50316 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-50334 | Windows Push Notification Information Disclosure Vulnerability |
| CVE-2026-50339 | Windows Push Notification Information Disclosure Vulnerability |
| CVE-2026-50341 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-50350 | Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability |
| CVE-2026-50352 | Windows Cryptographic Services Information Disclosure Vulnerability |
| CVE-2026-50376 | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-50381 | Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability |
| CVE-2026-50383 | Windows Print Spooler Information Disclosure Vulnerability |
| CVE-2026-50389 | Windows File Explorer Information Disclosure Vulnerability |
| CVE-2026-50394 | Windows Media Information Disclosure Vulnerability |
| CVE-2026-50401 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
| CVE-2026-50408 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-50409 | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2026-50415 | Windows Media Information Disclosure Vulnerability |
| CVE-2026-50416 | Win32k Information Disclosure Vulnerability |
| CVE-2026-50419 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-50420 | HTTP.sys Information Disclosure Vulnerability |
| CVE-2026-50428 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability |
| CVE-2026-50429 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-50430 | Windows Push Notification Information Disclosure Vulnerability |
| CVE-2026-50431 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability |
| CVE-2026-50434 | Windows Push Notification Information Disclosure Vulnerability |
| CVE-2026-50437 | Windows DWM Core Library Information Disclosure Vulnerability |
| CVE-2026-50442 | Windows File Explorer Information Disclosure Vulnerability |
| CVE-2026-50445 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-50453 | Windows USB Audio Class Driver Information Disclosure Vulnerability |
| CVE-2026-50455 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability |
| CVE-2026-50456 | Windows File Explorer Information Disclosure Vulnerability |
| CVE-2026-50463 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-50468 | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-50470 | Windows Network Policy Server SNMP Information Disclosure Vulnerability |
| CVE-2026-50473 | Windows File Explorer Information Disclosure Vulnerability |
| CVE-2026-50475 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-50483 | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2026-50496 | Windows Network Policy Server SNMP Information Disclosure Vulnerability |
| CVE-2026-50497 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-50504 | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-50657 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability |
| CVE-2026-50665 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-50678 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-50681 | Windows Secure Channel Information Disclosure Vulnerability |
| CVE-2026-50690 | Windows SMB Information Disclosure Vulnerability |
| CVE-2026-54116 | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-54126 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-54988 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-54997 | Windows SMB Information Disclosure Vulnerability |
| CVE-2026-55003 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-55023 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55026 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55027 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55028 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55035 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55042 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55046 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-55047 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55050 | Microsoft Word Information Disclosure Vulnerability |
| CVE-2026-55051 | Microsoft SharePoint Server Information Disclosure Vulnerability |
| CVE-2026-55054 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-55057 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55121 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55122 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-55124 | Microsoft Word Information Disclosure Vulnerability |
| CVE-2026-55138 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-55139 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-55142 | Microsoft Word Information Disclosure Vulnerability |
| CVE-2026-55898 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-56184 | Win32k Information Disclosure Vulnerability |
| CVE-2026-56185 | Windows Admin Center Information Disclosure Vulnerability |
| CVE-2026-56186 | Windows Secure Channel Information Disclosure Vulnerability |
| CVE-2026-56192 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-56193 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-56195 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-57083 | Windows Media Photo Codec Information Disclosure Vulnerability |
| CVE-2026-57084 | Windows File Explorer Information Disclosure Vulnerability |
| CVE-2026-57085 | Windows Print Spooler Information Disclosure Vulnerability |
| CVE-2026-57979 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-57982 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-58528 | Windows USB Audio Class Driver Information Disclosure Vulnerability |
| CVE-2026-58529 | Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability |
| CVE-2026-58533 | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-58535 | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-58539 | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-58546 | Windows Remote Desktop Client Information Disclosure Vulnerability |
Remote Code Execution Vulnerabilities
| CVE | CVE Title |
| CVE-2026-40400 | Windows PowerShell Remote Code Execution Vulnerability |
| CVE-2026-42975 | Windows Bluetooth Port Driver Remote Code Execution |
| CVE-2026-42990 | SQL Server ODBC driver Elevation of Privilege Vulnerability |
| CVE-2026-47290 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-47305 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-47642 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-48561 | Microsoft Copilot Remote Code Execution Vulnerability |
| CVE-2026-48564 | DHCP Server Service Remote Code Execution Vulnerability |
| CVE-2026-49164 | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-49169 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-49172 | Windows FTP Service Remote Code Execution Vulnerability |
| CVE-2026-49178 | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-49184 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-49792 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-49793 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-49796 | Windows GDI+ Remote Code Execution Vulnerability |
| CVE-2026-49797 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50299 | Windows Storage Spaces Direct Remote Code Execution Vulnerability |
| CVE-2026-50301 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-50308 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50309 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50313 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50314 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-50327 | Windows Media Remote Code Execution Vulnerability |
| CVE-2026-50347 | Windows Data.dll Remote Code Execution Vulnerability |
| CVE-2026-50357 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-50362 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-50370 | DHCP Server Service Remote Code Execution Vulnerability |
| CVE-2026-50380 | Windows GDI+ Remote Code Execution Vulnerability |
| CVE-2026-50382 | DirectX Graphics Kernel Remote Code Execution Vulnerability |
| CVE-2026-50386 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50388 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50417 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50426 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-50439 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability |
| CVE-2026-50447 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability |
| CVE-2026-50448 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50461 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50467 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-50471 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50474 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-50482 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50492 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-50494 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-50501 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-50502 | Windows Event Logging Service Remote Code Execution Vulnerability |
| CVE-2026-50505 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability |
| CVE-2026-50510 | GitHub Copilot Remote Code Execution Vulnerability |
| CVE-2026-50518 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-50520 | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2026-50646 | .NET Framework Remote Code Execution Vulnerability |
| CVE-2026-50649 | .NET Remote Code Execution Vulnerability |
| CVE-2026-50655 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-50663 | Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability |
| CVE-2026-50675 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-50685 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-50686 | Windows OLE Remote Code Execution Vulnerability |
| CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2026-54109 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-54117 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-54118 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-54122 | Windows GDI+ Remote Code Execution Vulnerability |
| CVE-2026-54124 | Windows Terminal Remote Code Execution Vulnerability |
| CVE-2026-54128 | Windows DHCP Client Remote Code Execution Vulnerability |
| CVE-2026-54131 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-54982 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2026-54990 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-54992 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability |
| CVE-2026-54993 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-54995 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2026-54999 | Windows TCP/IP Remote Code Execution Vulnerability |
| CVE-2026-55005 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2026-55010 | Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability |
| CVE-2026-55011 | Microsoft Defender Remote Code Execution Vulnerability |
| CVE-2026-55012 | Microsoft Defender Remote Code Execution Vulnerability |
| CVE-2026-55017 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55018 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55022 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55024 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55025 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55029 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55031 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55032 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55033 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55036 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55037 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55038 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55039 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55041 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55043 | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-55044 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55045 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55048 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55049 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55053 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55055 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55056 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55058 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55120 | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-55123 | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-55125 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55127 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55128 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55129 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55130 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55131 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55132 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55133 | Microsoft OneNote Remote Code Execution Vulnerability |
| CVE-2026-55134 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-55136 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55137 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55140 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-55141 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55899 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55944 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability |
| CVE-2026-55947 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55948 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-55949 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-56156 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-56159 | DHCP Server Service Remote Code Execution Vulnerability |
| CVE-2026-56188 | Windows Server Network driver Remote Code Execution Vulnerability |
| CVE-2026-56189 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-56190 | Remote Desktop Protocol Remote Code Execution Vulnerability |
| CVE-2026-56196 | Windows Admin Center (WAC) Remote Code Execution Vulnerability |
| CVE-2026-56197 | Windows Admin Center (WAC) Remote Code Execution Vulnerability |
| CVE-2026-56642 | Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability |
| CVE-2026-56649 | Windows Network File System Remote Code Execution Vulnerability |
| CVE-2026-57087 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-57089 | Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability |
| CVE-2026-57090 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-57094 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-58530 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-58542 | Windows Media Remote Code Execution Vulnerability |
| CVE-2026-58594 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-58608 | Windows Print Spooler Remote Code Execution Vulnerability |
| CVE-2026-58609 | Windows Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-58610 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-58618 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-58626 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-58631 | Windows Admin Center (WAC) Remote Code Execution Vulnerability |
| CVE-2026-58640 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability |
Security Feature Bypass Vulnerabilities
| CVE | CVE Title |
| CVE-2026-41109 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-45496 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-47304 | .NET Security Feature Bypass Vulnerability |
| CVE-2026-49783 | Secure Boot Security Feature Bypass Vulnerability |
| CVE-2026-50295 | Windows Zero Trust DNS Security Feature Bypass Vulnerability |
| CVE-2026-50302 | Windows Cryptographic Services Security Feature Bypass Vulnerability |
| CVE-2026-50303 | Windows Key Guard Security Feature Bypass Vulnerability |
| CVE-2026-50418 | Windows System Secure Feature Bypass Vulnerability |
| CVE-2026-50528 | .NET Security Feature Bypass Vulnerability |
| CVE-2026-50661 | Windows BitLocker Security Feature Bypass Vulnerability |
| CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability |
| CVE-2026-57097 | Microsoft XML Security Feature Bypass Vulnerability |
| CVE-2026-57101 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-57102 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-58545 | Windows Kernel Security Feature Bypass Vulnerability |
| CVE-2026-58614 | Windows Kernel Security Feature Bypass Vulnerability |
| CVE-2026-58638 | Windows Boot Loader Security Feature Bypass Vulnerability |
Spoofing Vulnerabilities
| CVE | CVE Title |
| CVE-2026-50659 | .NET Spoofing Vulnerability |
| CVE-2026-50684 | Active Directory Federation Server Spoofing Vulnerability |
| CVE-2026-54108 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-55008 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-55016 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-55019 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-55020 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-55021 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-55030 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-55034 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-55126 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-55135 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-56157 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-56181 | Windows Network Address Translation (NAT) Spoofing Vulnerability |
| CVE-2026-58595 | Microsoft Bing App for IOS Spoofing Vulnerability |
| CVE-2026-58647 | Microsoft PowerBI Report Server Spoofing Vulnerability |
Tampering Vulnerabilities
| CVE | CVE Title |
| CVE-2026-49174 | DNS Client Tampering Vulnerability |
| CVE-2026-50328 | Windows Server Update Service (WSUS) Tampering Vulnerability |
| CVE-2026-50465 | Windows DNS Client Tampering Vulnerability |
| CVE-2026-50495 | DNS Client Tampering Vulnerability |
| CVE-2026-50526 | .NET Tampering Vulnerability |
| CVE-2026-55144 | Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability |
| CVE-2026-57973 | Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability |
Share This Article
An Article By
An Article By
Ashwini Bhagwat
Senior Threat Researcher
Ashwini Bhagwat
Senior Threat Researcher
Ashwini Bhagwat is a seasoned cybersecurity professional with a passion for threat hunting and vulnerability analysis. She is a Senior Threat Researcher at SonicWall, where she leads the Microsoft Active Protections Program (MAPP). Ashwini's expertise lies in performing in-depth analysis of vulnerabilities and developing robust protections for IPS (Intrusion Prevention System).
