Patch Day month
September 2026 vulnerabilities
Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 2,269 vulnerabilities across 4,267 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 1 of 22 · records 1 to 200 of 4,267
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-81963 ↗Windows Server 2025 (Server Core installation)Important1%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5122871KB51228804 mentionsWindows Update Stack Elevation of Privilege Vulnerability
CVE-2026-85880 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5122876KB51228786 mentionsWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2026-87491 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableCISA KEVVulnCheckENISA3 mentionsChromium CVE-2026-87491: Out of bounds write in V8
CVE-2026-85046 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableCISA KEVVulnCheckENISA7 mentionsChromium: CVE-2026-85046 Type confusion in V8
CVE-2026-58599 ↗HEVC Video ExtensionsCritical0%Microsoft rates: Exploitation Less Likely1 mentionsHEVC Video Extensions Remote Code Execution Vulnerability
CVE-2026-62906 ↗Microsoft Discovery StudioCritical1%Microsoft rates: N/A1 mentionsMicrosoft Discovery Studio Information Disclosure Vulnerability
CVE-2026-62916 ↗Microsoft Entra IDCritical1%Microsoft rates: N/A1 mentionsMicrosoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-65669 ↗SQL Server Management Studio 22Critical1%Microsoft rates: Exploitation Less Likely1 mentionsMicrosoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-65772 ↗Microsoft Dynamics 365 (on-premises) version 9.1Critical1%Microsoft rates: Exploitation Less Likely2 mentionsMicrosoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2026-65818 ↗Microsoft Power PlatformCritical0%Microsoft rates: N/A1 mentionsPower Automate Elevation of Privilege Vulnerability
CVE-2026-66302 ↗Skype for Business Server 2019 CU8Critical1%Microsoft rates: Exploitation Less LikelyKB5123287KB51233001 mentionsSkype for Business Remote Code Execution Vulnerability
and 1 more
KB5123301CVE-2026-67378 ↗Microsoft SQL Server 2019 for x64-based Systems (GDR)Critical0%Microsoft rates: Exploitation Less LikelyKB5122768KB51227692 mentionsMicrosoft SQL Server Remote Code Execution Vulnerability
CVE-2026-67631 ↗Microsoft SQL Server 2025 for x64-based Systems (CU8)Critical1%Microsoft rates: Exploitation Less LikelyKB5122768KB51227692 mentionsMicrosoft SQL Server Remote Code Execution Vulnerability
CVE-2026-67636 ↗Microsoft SQL Server 2019 for x64-based Systems (GDR)Critical0%Microsoft rates: Exploitation UnlikelyKB5122768KB51227692 mentionsMicrosoft SQL Server Remote Code Execution Vulnerability
CVE-2026-67643 ↗Microsoft SQL Server 2022 for x64-based Systems (GDR)Critical1%Microsoft rates: Exploitation UnlikelyKB5122768KB51227692 mentionsMicrosoft SQL Server Remote Code Execution Vulnerability
CVE-2026-69285 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB50029161 mentionsMicrosoft Office Remote Code Execution Vulnerability
CVE-2026-69499 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Imaging Component Remote Code Execution Vulnerability
CVE-2026-69501 ↗Windows Server 2022Critical0%Microsoft rates: Exploitation Less LikelyKB5122871KB51228781 mentionsWindows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2026-69518 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Remote Desktop Remote Code Execution Vulnerability
CVE-2026-69530 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
and 1 more
KB5122882CVE-2026-69579 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Message Queuing Remote Code Execution Vulnerability
CVE-2026-69590 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2026-69595 ↗Windows Server 2019Critical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2026-69601 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsMicrosoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2026-69603 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Hyper-V Remote Code Execution Vulnerability
CVE-2026-69632 ↗Microsoft Office 365 for MacCritical1%Microsoft rates: Exploitation Less Likely1 mentionsMicrosoft Office Remote Code Execution Vulnerability
CVE-2026-69649 ↗Raw Image Extension on Windows 10 Version 21H2 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less Likely1 mentionsRaw Image Extension Remote Code Execution Vulnerability
CVE-2026-69676 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation More LikelyKB5122871KB51228761 mentionsWindows Kerberos Remote Code Execution Vulnerability
CVE-2026-69678 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB50029201 mentionsMicrosoft Office PowerPoint Remote Code Execution Vulnerability
CVE-2026-69710 ↗Windows 10 Version 21H2 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122878KB51228801 mentionsWindows Hello Elevation of Privilege Vulnerability
CVE-2026-69712 ↗Windows Server 2019Critical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Key Distribution Center Remote Code Execution Vulnerability
CVE-2026-69725 ↗Windows 10 Version 21H2 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122878KB51228801 mentionsWindows Hello Elevation of Privilege Vulnerability
CVE-2026-69730 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation More LikelyKB5122871KB51228763 mentionsWindows DNS Server Remote Code Execution Vulnerability
CVE-2026-69740 ↗Windows 11 Version 25H2 for ARM64-based SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122880KB51240081 mentionsWindows Hello Elevation of Privilege Vulnerability
and 1 more
KB5124012CVE-2026-69767 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB50029201 mentionsMicrosoft Office PowerPoint Remote Code Execution Vulnerability
CVE-2026-69769 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows HTTP Print Provider Remote Code Execution Vulnerability
CVE-2026-69784 ↗Windows 10 Version 21H2 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122878KB51228801 mentionsWindows Hello Elevation of Privilege Vulnerability
CVE-2026-69797 ↗Microsoft Office 365 for MacCritical1%Microsoft rates: Exploitation Less LikelyKB50029201 mentionsMicrosoft Office PowerPoint Remote Code Execution Vulnerability
CVE-2026-69799 ↗Windows 10 Version 21H2 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122878KB51228801 mentionsWindows Hello Elevation of Privilege Vulnerability
CVE-2026-69813 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows DNS Server Remote Code Execution Vulnerability
CVE-2026-69820 ↗Windows 10 Version 21H2 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122878KB51228801 mentionsWindows Hello Elevation of Privilege Vulnerability
CVE-2026-69827 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows DNS Server Remote Code Execution Vulnerability
CVE-2026-69829 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228763 mentionsWindows Shell Remote Code Execution Vulnerability
CVE-2026-69845 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows DHCP Server Remote Code Execution Vulnerability
CVE-2026-69846 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2026-69852 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation More LikelyKB5122871KB51228761 mentionsWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2026-69854 ↗Spring Cloud AzureCritical1%Microsoft rates: Exploitation More Likely1 mentionsSpring Cloud Azure Elevation of Privilege Vulnerability
CVE-2026-69857 ↗Azure Cosmos DBCritical0%Microsoft rates: Exploitation More Likely1 mentionsAzure Cosmos DB Spoofing Vulnerability
CVE-2026-69858 ↗Windows Server 2022Critical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228821 mentionsWindows DNS Server Remote Code Execution Vulnerability
CVE-2026-69860 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Imaging Component Remote Code Execution Vulnerability
CVE-2026-69864 ↗Windows 10 Version 21H2 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122878KB51228801 mentionsWindows Hello Elevation of Privilege Vulnerability
CVE-2026-69874 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows ALPC Elevation of Privilege Vulnerability
CVE-2026-69890 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
CVE-2026-69906 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2026-70178 ↗Microsoft FabricCritical0%Microsoft rates: N/A1 mentionsMicrosoft Fabric Elevation of Privilege Vulnerability
CVE-2026-70203 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Media Player Remote Code Execution Vulnerability
CVE-2026-70296 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Imaging Component Remote Code Execution Vulnerability
CVE-2026-70351 ↗WebP Image ExtensionCritical1%Microsoft rates: Exploitation Unlikely1 mentionsMicrosoft WebP Image Extension Remote Code Execution Vulnerability
CVE-2026-70352 ↗Azure AI Language AuthoringCritical1%Microsoft rates: N/A1 mentionsAzure AI Language Elevation of Privilege Vulnerability
CVE-2026-70585 ↗Windows Server 2019Critical0%Microsoft rates: Exploitation More LikelyKB5122871KB51228761 mentionsWindows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2026-70586 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Paint Remote Code Execution Vulnerability
CVE-2026-72950 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2026-72954 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Deployment Services Remote Code Execution Vulnerability
CVE-2026-72957 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation More LikelyKB5122871KB51228761 mentionsWindows Deployment Services Remote Code Execution Vulnerability
CVE-2026-72958 ↗Windows Server 2025 (Server Core installation)Critical0%Microsoft rates: Exploitation UnlikelyKB5122871KB51240081 mentionsWindows Credential Guard Elevation of Privilege Vulnerability
and 1 more
KB5124012CVE-2026-72959 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2026-72960 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Media Player Remote Code Execution Vulnerability
CVE-2026-72961 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-72962 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows USB Video Driver Elevation of Privilege Vulnerability
CVE-2026-72979 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows DHCP Server Remote Code Execution Vulnerability
CVE-2026-72980 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Hello Security Feature Bypass Vulnerability
CVE-2026-72981 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsIP Helper Remote Code Execution Vulnerability
CVE-2026-72982 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows Netlogon Remote Code Execution Vulnerability
CVE-2026-72983 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsInternet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2026-72986 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsGraphic Fonts Remote Code Execution Vulnerability
CVE-2026-72987 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation UnlikelyKB5122871KB51228761 mentionsWindows DNS Remote Code Execution Vulnerability
CVE-2026-73006 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsDirectWrite Remote Code Execution Vulnerability
CVE-2026-73009 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2026-73010 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsMicrosoft Failover Cluster Remote Code Execution Vulnerability
and 1 more
KB5122882CVE-2026-73013 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Imaging Component Remote Code Execution Vulnerability
CVE-2026-73017 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsGraphics Kernel Remote Code Execution Vulnerability
CVE-2026-73018 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsGraphic Fonts Remote Code Execution Vulnerability
CVE-2026-73023 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Imaging Component Remote Code Execution Vulnerability
CVE-2026-77493 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Graphics Component Remote Code Execution Vulnerability
CVE-2026-77495 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Imaging Component Remote Code Execution Vulnerability
CVE-2026-77504 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-77505 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows DNS Server Remote Code Execution Vulnerability
CVE-2026-77898 ↗Microsoft Office LTSC 2024 for 32-bit editionsCritical0%Microsoft rates: Exploitation Less Likely1 mentionsMicrosoft Office Remote Code Execution Vulnerability
CVE-2026-78439 ↗Microsoft Office LTSC for Mac 2021Critical1%Microsoft rates: Exploitation Less Likely1 mentionsMicrosoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-78444 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsMicrosoft Failover Cluster Remote Code Execution Vulnerability
and 1 more
KB5122882CVE-2026-78445 ↗Windows Server 2019Critical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2026-78449 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2026-78450 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsWindows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
and 1 more
KB5122882CVE-2026-78505 ↗Microsoft Office 365 for MacCritical1%Microsoft rates: Exploitation Less LikelyKB50029161 mentionsMicrosoft Office Remote Code Execution Vulnerability
CVE-2026-78509 ↗Microsoft Office 365 for MacCritical1%Microsoft rates: Exploitation Less LikelyKB50029231 mentionsMicrosoft Office Outlook Remote Code Execution Vulnerability
CVE-2026-78510 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB50029161 mentionsMicrosoft Word Remote Code Execution Vulnerability
CVE-2026-78519 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB50029191 mentionsMicrosoft Office Outlook Remote Code Execution Vulnerability
CVE-2026-78520 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB50029231 mentionsMicrosoft Office Outlook Information Disclosure Vulnerability
CVE-2026-78525 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB50029231 mentionsMicrosoft Office Outlook Remote Code Execution Vulnerability
CVE-2026-80083 ↗Windows Server 2022Critical0%Microsoft rates: Exploitation UnlikelyKB5122871KB51228801 mentionsWindows Hyper-V Remote Code Execution Vulnerability
CVE-2026-80098 ↗Microsoft Copilot StudioCritical0%Microsoft rates: N/A1 mentionsCopilot Studio Elevation of Privilege Vulnerability
CVE-2026-81352 ↗Web Media Extensions on Windows 10 Version 21H2 for 32-bit SystemsCritical0%Microsoft rates: Exploitation Unlikely1 mentionsWeb Media Extensions Remote Code Execution Vulnerability
CVE-2026-81354 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation Less LikelyKB5122876KB51228781 mentionsWindows Hello Elevation of Privilege Vulnerability
CVE-2026-81355 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation Less LikelyKB5122871KB51228761 mentionsVirtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
CVE-2026-81948 ↗Microsoft Office 365 for MacCritical0%Microsoft rates: Exploitation Less LikelyKB5002904KB50029141 mentionsMicrosoft Excel Remote Code Execution Vulnerability
CVE-2026-81949 ↗Microsoft Office 2019 for 32-bit editionsCritical0%Microsoft rates: Exploitation UnlikelyKB5002904KB50029141 mentionsMicrosoft Excel Remote Code Execution Vulnerability
CVE-2026-81950 ↗Microsoft Office 2019 for 32-bit editionsCritical0%Microsoft rates: Exploitation Less LikelyKB5002904KB50029141 mentionsMicrosoft Excel Remote Code Execution Vulnerability
CVE-2026-81951 ↗Microsoft Office 2019 for 32-bit editionsCritical0%Microsoft rates: Exploitation Less LikelyKB5002904KB50029141 mentionsMicrosoft Excel Remote Code Execution Vulnerability
CVE-2026-81952 ↗Microsoft Office 365 for MacCritical1%Microsoft rates: Exploitation Less LikelyKB50029161 mentionsMicrosoft Word Remote Code Execution Vulnerability
CVE-2026-81953 ↗Microsoft Office 2019 for 32-bit editionsCritical0%Microsoft rates: Exploitation Less LikelyKB5002904KB50029141 mentionsMicrosoft Excel Remote Code Execution Vulnerability
CVE-2026-81955 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation UnlikelyKB5002916KB51228711 mentionsWindows Graphics Component Remote Code Execution Vulnerability
CVE-2026-81959 ↗Microsoft Office 2019 for 32-bit editionsCritical0%Microsoft rates: Exploitation Less LikelyKB5002904KB50029141 mentionsMicrosoft Excel Remote Code Execution Vulnerability
CVE-2026-83498 ↗Windows Server 2025 (Server Core installation)Critical0%Microsoft rates: Exploitation Less LikelyKB5122871KB51228801 mentionsWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2026-83501 ↗Windows Server 2025 (Server Core installation)Critical0%Microsoft rates: Exploitation More LikelyKB5122871KB51228801 mentionsWindows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
CVE-2026-83711 ↗Microsoft Azure Active Directory B2CCritical1%Microsoft rates: N/A1 mentionsMicrosoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVE-2026-83939 ↗Windows 11 version 26H1 for x64-based SystemsCritical0%Microsoft rates: Exploitation Less LikelyKB51240121 mentionsWindows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2026-83941 ↗Microsoft Entra IDCritical1%Microsoft rates: N/A1 mentionsEntra ID Elevation of Privilege Vulnerability
CVE-2026-85507 ↗azl3 freeipmi 1.6.18-1 on Azure Linux 3.0CriticalOut-of-band0%Microsoft rating unavailableipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).
CVE-2026-85506 ↗azl3 freeipmi 1.6.18-1 on Azure Linux 3.0CriticalOut-of-band0%Microsoft rating unavailableipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).
CVE-2026-85509 ↗azl3 freeipmi 1.6.18-1 on Azure Linux 3.0CriticalOut-of-band0%Microsoft rating unavailableFreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.
CVE-2026-85508 ↗azl3 freeipmi 1.6.18-1 on Azure Linux 3.0CriticalOut-of-band0%Microsoft rating unavailableipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).
CVE-2026-85504 ↗azl3 freeipmi 1.6.18-1 on Azure Linux 3.0CriticalOut-of-band0%Microsoft rating unavailableFreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.
CVE-2026-34182 ↗Microsoft Visual Studio 2022 version 17.14CriticalOut-of-band1%Microsoft rating unavailableCMS AuthEnvelopedData Processing May Accept Forged Messages
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-15378trackedCVSS 9.3Red Hat OpenShift AI 2.25registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:33de621fa51a8237b6ce3d98e068e8f024f8abb3b6713cb8e946c0c9a4e0317a_arm64Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux Server (v. 7 ELS)389-ds-base-0:1.3.11.1-15.el7_9.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream E4S (v.8.8)389-ds-base-0:1.4.3.35-21.module+el8.8.0+24788+bed99f90.ppc64le::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream E4S (v.9.2)389-ds-base-0:2.2.4-22.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Directory Server 12.2 E4S for RHEL 9389-ds-base-0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5.src::redhat-ds:12Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Directory Server 12.4 E4S for RHEL 9389-ds-base-0:2.4.5-26.module+el9dsrv+24813+95aeb06d.src::redhat-ds:12Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream E4S (v.9.4)389-ds-base-0:2.4.5-29.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream EUS (v.9.6)389-ds-base-0:2.6.1-24.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream (v. 9)389-ds-base-0:2.8.0-10.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream (v. 10)389-ds-base-0:3.2.0-10.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream AUS (v.8.4)389-ds-base-0:1.4.3.34-7.module+el8.4.0+24797+f0b70e95.src::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream AUS (v.8.6)389-ds-base-0:1.4.3.34-12.module+el8.6.0+24796+4783e9a9.src::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream (v. 8)389-ds-base-0:1.4.3.39-28.module+el8.10.0+24822+205d20dc.aarch64::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Directory Server 11.7 E4S for RHEL 8389-ds-base-0:1.4.3.34-18.module+el8dsrv+24812+0acb1821.src::redhat-ds:11Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Directory Server 11.9 for RHEL 8389-ds-base-0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d.src::redhat-ds:11Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)389-ds-base-0:3.0.6-21.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18922trackedCVSS 9.8Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)389-ds-base-0:1.2.11.15-97.el6_10.1.i686Patch ↗Advisory ↗
Red HatCVE-2026-66786trackedCVSS 9.1Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64Patch ↗Advisory ↗
Red HatCVE-2026-10050trackedCVSS 9.1Red Hat OpenShift Dev Spaces 3.30registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64Patch ↗Advisory ↗
AndroidCVE-2026-49921trackedCritical (Android rating)platform/packages/modules/BluetoothNot reportedPatch ↗Advisory ↗
Red HatCVE-2026-54058trackedCVSS 9.1Red Hat Enterprise Linux AI 3.3registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64Patch ↗Advisory ↗
Red HatCVE-2026-54058trackedCVSS 9.1Red Hat Enterprise Linux AI 3.3registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64Patch ↗Advisory ↗
Red HatCVE-2026-54763trackedCVSS 10.0Red Hat OpenShift Dev Spaces 3.30registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64Patch ↗Advisory ↗
Red HatCVE-2026-65600trackedCVSS 10.0Red Hat OpenShift Dev Spaces 3.30registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64Patch ↗Advisory ↗
Red HatCVE-2025-49794CVSS 9.1Red Hat OpenShift Container Platform 4.16rhcos-aarch64-416.94.202609011112-0Patch ↗Advisory ↗
Red HatCVE-2025-49796CVSS 9.1Red Hat OpenShift Container Platform 4.16rhcos-aarch64-416.94.202609011112-0Patch ↗Advisory ↗
Red HatCVE-2026-78234CVSS 9.9Red Hat Build of Apache Camel HawtIO 4.4 for RHEL 9rhbac-4/hawtio-operator-bundle@sha256:1d8ea1649ed820b4ccd88642da2d4893d235304bf555420c4cdac8f14143c250_arm64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.