Threat intelligence, Threat Research
Microsoft Security Bulletin Coverage for August 2026
Overview
Microsoft’s August 2026 Patch Tuesday has 422 vulnerabilities, of which 177 are Elevation of Privilege. SonicWall Capture Labs threat research team has analyzed and addressed Microsoft’s security advisories for the month of August 2026 and has produced coverage for 24 of the reported vulnerabilities.
Vulnerabilities with Detections
CVE | CVE Title | Signature |
| CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ASPY 7271 Exploit-exe exe.MP_564 |
| CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | ASPY 7234 Exploit-exe exe.MP_533 |
| CVE-2026-61359 | Windows Storage Elevation of Privilege Vulnerability | ASPY 701 Exploit-exe exe.MP_568 |
| CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability | ASPY 702 Exploit-exe exe.MP_569 |
| CVE-2026-61929 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 709 Exploit-exe exe.MP_576 |
| CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 710 Exploit-exe exe.MP_577 |
| CVE-2026-62688 | Windows MIDI Service Module Elevation of Privileges Vulnerability | ASPY 703 Exploit-exe exe.MP_570 |
| CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | ASPY 711 Exploit-exe exe.MP_578 |
| CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability | ASPY 704 Exploit-exe exe.MP_571 |
| CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability | ASPY 705 Exploit-exe exe.MP_572 |
| CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ASPY 7218 Exploit-exe exe.MP_521 |
| CVE-2026-62737 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 706 Exploit-exe exe.MP_573 |
| CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability | ASPY 7272 Exploit-exe exe.MP_565 |
| CVE-2026-62766 | Windows Kerberos Elevation of Privilege Vulnerability | ASPY 712 Exploit-exe exe.MP_579 |
| CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ASPY 713 Exploit-exe exe.MP_580 |
| CVE-2026-62788 | Windows Kernel Elevation of Privilege Vulnerability | ASPY 707 Exploit-exe exe.MP_574 |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | ASPY 7273 Exploit-exe exe.MP_566 |
| CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability | ASPY 7274 Exploit-exe exe.MP_567 |
| CVE-2026-63520 | Microsoft SharePoint Server Remote Code Execution Vulnerability | IPS 4626 Microsoft SharePoint Server Authentication Bypass (CVE-2026-63520) |
| CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability | ASPY 714 Exploit-exe exe.MP_581 |
| CVE-2026-65788 | Desktop Window Manager Elevation of Privilege Vulnerability | ASPY 715 Exploit-exe exe.MP_582 |
| CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | ASPY 716 Exploit-exe exe.MP_583 |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ASPY 717 Exploit-exe exe.MP_584 |
| CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ASPY 717 Exploit-exe exe.MP_584 |
Release Breakdown
The vulnerabilities can be classified into the following categories:
Â
Â
For August there are 63 critical and 358 important vulnerabilities.
Â
Â
Microsoft tracks vulnerabilities that are being actively exploited at the time of discovery and those that have been disclosed publicly before the patch Tuesday release for each month. The above chart displays these metrics as seen each month.
Â
Release Detailed Breakdown
Denial of Service Vulnerabilities
| CVE | CVE Title |
| CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability |
| CVE-2026-55015 | Microsoft Remote Help Denial of Service Vulnerability |
| CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability |
| CVE-2026-59138 | Microsoft Remote Registry Service Denial of Service Vulnerability |
| CVE-2026-61345 | Microsoft Remote Registry Service Denial of Service Vulnerability |
| CVE-2026-62702 | Windows Graphics Kernel Denial of Service Vulnerability |
| CVE-2026-62901 | .NET Denial of Service Vulnerability |
| CVE-2026-62912 | Microsoft Exchange Server Denial of Service Vulnerability |
| CVE-2026-65681 | Windows iSCSI Target Service Denial of Service Vulnerability |
| CVE-2026-65785 | Windows DHCP Client Denial of Service Vulnerability |
| CVE-2026-65796 | Windows iSCSI Target Service Denial of Service Vulnerability |
| CVE-2026-68819 | Windows Network File System Denial of Service Vulnerability |
| CVE-2026-70348 | Windows Management Services Denial of Service Vulnerability |
| CVE-2026-70350 | Microsoft Identity Denial of service vulnerability |
Elevation of Privilege Vulnerabilities
| CVE | CVE Title |
| CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability |
| CVE-2026-47299 | Azure Monitor Agent Elevation of Privilege Vulnerability |
| CVE-2026-49163 | Application Insights Profiler Elevation of Privilege Vulnerability |
| CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-50481 | Azure Active Directory Elevation of Privilege Vulnerability |
| CVE-2026-50516 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability |
| CVE-2026-56162 | Azure SQL Database Elevation of Privilege Vulnerability |
| CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability |
| CVE-2026-57104 | Azure Storage Explorer Elevation of Privilege Vulnerability |
| CVE-2026-58641 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-59115 | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability |
| CVE-2026-59118 | Microsoft Power Apps Elevation of Privilege Vulnerability |
| CVE-2026-59119 | PowerShell Elevation of Privilege Vulnerability |
| CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability |
| CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-59133 | Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability |
| CVE-2026-61346 | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-61349 | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2026-61353 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-61355 | Windows Sensor Data Service Elevation of Privilege Vulnerability |
| CVE-2026-61356 | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-61357 | Application Information Services Elevation of Privilege Vulnerability |
| CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability |
| CVE-2026-61359 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-61364 | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-61365 | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-61366 | Windows Network Connection Broker Elevation of Privilege Vulnerability |
| CVE-2026-61367 | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-61923 | Windows Display Enhancement Service Elevation of Privilege Vulnerability |
| CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-61926 | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-61927 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-61929 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-61932 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-61934 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-61937 | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-61938 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-61939 | Winlogon Elevation of Privilege Vulnerability |
| CVE-2026-62688 | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-62690 | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-62692 | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-62693 | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-62695 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability |
| CVE-2026-62700 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-62701 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62705 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-62707 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-62708 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-62710 | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-62711 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-62717 | Windows Message Queuing Elevation of Privilege Vulnerability |
| CVE-2026-62719 | Windows Message Queuing Elevation of Privilege Vulnerability |
| CVE-2026-62721 | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability |
| CVE-2026-62722 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-62723 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62724 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62725 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62726 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62727 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62728 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-62729 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62732 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62733 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-62734 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62735 | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-62736 | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-62737 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-62739 | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-62747 | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-62748 | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-62749 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-62751 | Windows Projected File System Elevation of Privilege Vulnerability |
| CVE-2026-62752 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-62753 | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-62754 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-62755 | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-62758 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-62761 | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-62766 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-62768 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-62769 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-62770 | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-62771 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-62772 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-62773 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-62774 | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-62776 | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-62777 | Windows License Manager Elevation of Privilege Vulnerability |
| CVE-2026-62778 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-62779 | Windows Schannel Elevation of Privilege Vulnerability |
| CVE-2026-62780 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-62788 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-62797 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-62799 | Windows SMB Client Elevation of Privilege Vulnerability |
| CVE-2026-62803 | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-62807 | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-62811 | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-62812 | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-62827 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2026-62830 | Azure SRE Agent Elevation of Privilege Vulnerability |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability |
| CVE-2026-62836 | Azure SQL Managed Instance Elevation of Privilege Vulnerability |
| CVE-2026-62872 | .NET Framework Elevation of Privilege Vulnerability |
| CVE-2026-62873 | Microsoft 365 Admin Center Elevation of Privilege Vulnerability |
| CVE-2026-62876 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-62880 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-62881 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-62883 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-62885 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-62886 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-62892 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability |
| CVE-2026-62894 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-62896 | Microsoft Teams Elevation of Privilege Vulnerability |
| CVE-2026-62908 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2026-62909 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-62910 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-63508 | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability |
| CVE-2026-63522 | Azure SQL Database Elevation of Privilege Vulnerability |
| CVE-2026-64921 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability |
| CVE-2026-65668 | Microsoft Purview eDiscovery Elevation of Privilege Vulnerability |
| CVE-2026-65671 | Remote Access API Elevation of Privilege Vulnerability |
| CVE-2026-65672 | Remote Access API Elevation of Privilege Vulnerability |
| CVE-2026-65673 | Microsoft Entra Connect Elevation of Privilege Vulnerability |
| CVE-2026-65678 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-65680 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability |
| CVE-2026-65773 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-65774 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-65776 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-65778 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-65779 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-65780 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-65781 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-65782 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-65783 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-65786 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-65787 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-65788 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-65790 | Windows Message Queuing Elevation of Privilege Vulnerability |
| CVE-2026-65795 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-65797 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-65798 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-65799 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-65810 | .NET Framework Elevation of Privilege Vulnerability |
| CVE-2026-65813 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-65814 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability |
| CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability |
| CVE-2026-68790 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability |
| CVE-2026-68792 | Microsoft Office Elevation of Privilege Vulnerability |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-68821 | Windows Package Manager Elevation of Privilege Vulnerability |
| CVE-2026-70304 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-70324 | Microsoft SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-70326 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2026-70330 | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-70340 | Azure CycleCloud Elevation of Privilege Vulnerability |
| CVE-2026-70344 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-70345 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-70346 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-70347 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-70355 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
Information Disclosure Vulnerabilities
| CVE | CVE Title |
| CVE-2026-40375 | Microsoft Dynamics Business Central Information Disclosure Vulnerability |
| CVE-2026-47285 | Visual Studio Code Information Disclosure Vulnerability |
| CVE-2026-54123 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability |
| CVE-2026-56161 | Azure Logic Apps Information Disclosure Vulnerability |
| CVE-2026-58612 | PowerShell Information Disclosure Vulnerability |
| CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability |
| CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability |
| CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability |
| CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability |
| CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability |
| CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability |
| CVE-2026-61347 | Windows Event Logging Service Information Disclosure Vulnerability |
| CVE-2026-61350 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-61360 | Windows GDI Information Disclosure Vulnerability |
| CVE-2026-61368 | Windows Hyper-V Information Disclosure Vulnerability |
| CVE-2026-61918 | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-61921 | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-61924 | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-61933 | Windows DWM Core Library Information Disclosure Vulnerability |
| CVE-2026-62703 | Windows DWM Core Library Information Disclosure Vulnerability |
| CVE-2026-62709 | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2026-62714 | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-62715 | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-62716 | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-62718 | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-62720 | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-62730 | Windows Wired AutoConfig Service Information Disclosure Vulnerability |
| CVE-2026-62738 | Windows Management Instrumentation Information Disclosure Vulnerability |
| CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability |
| CVE-2026-62742 | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-62743 | Win32k Information Disclosure Vulnerability |
| CVE-2026-62745 | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-62746 | Win32k Information Disclosure Vulnerability |
| CVE-2026-62775 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability |
| CVE-2026-62782 | Windows SMB Client Information Disclosure Vulnerability |
| CVE-2026-62786 | Win32k Information Disclosure Vulnerability |
| CVE-2026-62793 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-62796 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-62798 | Win32k Information Disclosure Vulnerability |
| CVE-2026-62814 | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-62837 | Microsoft SharePoint Server Information Disclosure Vulnerability |
| CVE-2026-62842 | Microsoft Office Graphics Component Information Disclosure Vulnerability |
| CVE-2026-62887 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-62900 | .NET Information Disclosure Vulnerability |
| CVE-2026-62902 | .NET Information Disclosure Vulnerability |
| CVE-2026-63517 | Microsoft Office Graphics Component Information Disclosure Vulnerability |
| CVE-2026-63521 | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-63524 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-63528 | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-63529 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-63530 | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-63531 | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-64899 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-64917 | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-65662 | Windows GDI Information Disclosure Vulnerability |
| CVE-2026-65769 | Microsoft Teams iOS Information Disclosure Vulnerability |
| CVE-2026-65784 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-65794 | Windows SMB Client Information Disclosure Vulnerability |
| CVE-2026-65806 | Azure CycleCloud Information Disclosure Vulnerability |
| CVE-2026-66301 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability |
| CVE-2026-66806 | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-66809 | Microsoft Office Graphics Component Information Disclosure Vulnerability |
| CVE-2026-66810 | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-68797 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-68799 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-68802 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-68808 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-68809 | Powerpoint Information Disclosure Vulnerability |
| CVE-2026-68813 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-70310 | Microsoft Word Information Disclosure Vulnerability |
| CVE-2026-70312 | Powerpoint Information Disclosure Vulnerability |
| CVE-2026-70313 | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-70314 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-70315 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-70316 | Powerpoint Information Disclosure Vulnerability |
| CVE-2026-70317 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-70318 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-70319 | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-70320 | Powerpoint Information Disclosure Vulnerability |
| CVE-2026-70322 | Powerpoint Information Disclosure Vulnerability |
| CVE-2026-70323 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-70325 | Powerpoint Information Disclosure Vulnerability |
| CVE-2026-70327 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-70328 | Microsoft Excel Information Disclosure Vulnerability |
Â
Remote Code Execution Vulnerabilities
| CVE | CVE Title |
| CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-50515 | Azure Service Bus Remote Code Execution Vulnerability |
| CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-58651 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-59113 | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-59124 | Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability |
| CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-61352 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-61361 | Windows DHCP Client Remote Code Execution Vulnerability |
| CVE-2026-61363 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-61920 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability |
| CVE-2026-62706 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-62744 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-62781 | RPC Runtime Library Remote Code Execution Vulnerability |
| CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability |
| CVE-2026-62785 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability |
| CVE-2026-62787 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-62790 | Windows SMBv3 Server Remote Code Execution Vulnerability |
| CVE-2026-62792 | Windows TCP/IP Remote Code Execution Vulnerability |
| CVE-2026-62795 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability |
| CVE-2026-62800 | Windows SMBv3 Server Remote Code Execution Vulnerability |
| CVE-2026-62815 | Microsoft QUIC Remote Code Execution Vulnerability |
| CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability |
| CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-62820 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability |
| CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-62871 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability |
| CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability |
| CVE-2026-62897 | .NET Framework Remote Code Execution Vulnerability |
| CVE-2026-62913 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2026-63513 | Microsoft Office Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-63514 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-63515 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-63518 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-63519 | Microsoft Office Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-63520 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-63525 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-63526 | Microsoft Office Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-63527 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-63532 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-63533 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-64898 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-64901 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-64903 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-64904 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-64905 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-64906 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2026-64907 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-64908 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2026-64909 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-64910 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-64911 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-64912 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2026-64914 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2026-64915 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-64919 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2026-64920 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2026-65656 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-65657 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-65658 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-65661 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-65663 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-65664 | Microsoft Office Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-65679 | Windows iSCSI Target Service Remote Code Execution Vulnerability |
| CVE-2026-65768 | Microsoft Teams Remote Code Execution Vulnerability |
| CVE-2026-65789 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability |
| CVE-2026-65792 | Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
| CVE-2026-65807 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-65811 | Power BI Remote Code Execution Vulnerability |
| CVE-2026-65815 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
| CVE-2026-66802 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability |
| CVE-2026-66805 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-66807 | Microsoft Office Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-66808 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-68793 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68794 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68795 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68796 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68798 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68800 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68801 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68803 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68804 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68805 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68806 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68807 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68810 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68811 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68812 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68814 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68815 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68816 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68817 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-68823 | Azure Confidential Ledger Remote Code Execution Vulnerability |
| CVE-2026-69320 | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-70130 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-70311 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-70321 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2026-70329 | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2026-70337 | Microsoft PowerShell Remote Code Execution Vulnerability |
| CVE-2026-70354 | .NET Core Remote Code Execution Vulnerability |
| CVE-2026-71331 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability |
Â
Â
Security Feature Bypass Vulnerabilities
| CVE | CVE Title |
| CVE-2026-54981 | Visual Studio Code Python Extension Security Feature Bypass Vulnerability |
| CVE-2026-58650 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-61936 | Windows Defender Firewall Service Security Feature Bypass Vulnerability |
| CVE-2026-62757 | Windows Schannel Security Feature Bypass Vulnerability |
| CVE-2026-62899 | .NET Security Feature Bypass Vulnerability |
| CVE-2026-62915 | Microsoft Exchange Server Security Feature Bypass Vulnerability |
| CVE-2026-65675 | CoPilot Chat Security Feature Bypass Vulnerability |
| CVE-2026-65777 | Active Directory Security Feature Bypass Vulnerability |
| CVE-2026-69278 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-69306 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-70338 | Microsoft PowerShell Security Feature Bypass Vulnerability |
Â
Spoofing Vulnerabilities
| CVE | CVE Title |
| CVE-2026-55013 | Windows Remote Help Defense Spoofing Vulnerability |
| CVE-2026-56179 | Windows Network Address Translation (NAT) Spoofing Vulnerability |
| CVE-2026-57105 | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-58639 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-62829 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-62839 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-62869 | Azure Entra ID Spoofing Vulnerability |
| CVE-2026-62882 | Microsoft Outlook Spoofing Vulnerability |
| CVE-2026-62914 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-62917 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-62918 | Microsoft Teams Spoofing Vulnerability |
| CVE-2026-63516 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-64897 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-64900 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-64902 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-64916 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-64922 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-65660 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-65767 | Microsoft Teams for Android and iOS Spoofing Vulnerability |
| CVE-2026-70306 | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-70332 | Microsoft Office SharePoint Spoofing Vulnerability |
Â
Tampering VulnerabilitiesÂ
| CVE | CVE Title |
| CVE-2026-61928 | Windows Hello Tampering Vulnerability |
| CVE-2026-62750 | Windows HTTP Protocol Stack Tampering Vulnerability |
| CVE-2026-63512 | Microsoft SharePoint Server Tampering Vulnerability |
Â
Â
Â
Â
Â
Â
Â
Â
Share This Article
An Article By
An Article By
Ashwini Bhagwat
Senior Threat Researcher
Ashwini Bhagwat
Senior Threat Researcher
Ashwini Bhagwat is a seasoned cybersecurity professional with a passion for threat hunting and vulnerability analysis. She is a Senior Threat Researcher at SonicWall, where she leads the Microsoft Active Protections Program (MAPP). Ashwini's expertise lies in performing in-depth analysis of vulnerabilities and developing robust protections for IPS (Intrusion Prevention System).
