Сьогодні Microsoft випустила оновлення для серпня 2026 року в рамках “Patch Tuesday”, що містить виправлення для 400 вразливостей. Серед них одна, яка активно експлуатувалася, та дві публічно розголошені вразливості нульового дня.
Оновлення усуває 42 “критичні” вразливості: 37 з них дозволяють віддалене виконання коду, а 5 — підвищення привілеїв.
Орієнтовна кількість виправлених вразливостей за категоріями:
- 176 вразливостей з підвищенням привілеїв
- 11 вразливостей обходу функцій безпеки
- 110 вразливостей віддаленого виконання коду
- 86 вразливостей розкриття інформації
- 12 вразливостей відмови в обслуговуванні
- 21 вразливість спуфінгу
BleepingComputer враховує лише ті виправлення, які Microsoft випустила сьогодні. Тому загальна кількість вразливостей не включає ті, що були виправлені раніше цього місяця у Mariner, Microsoft Teams, Microsoft Azure, Microsoft Entra, Microsoft Office та Power Apps.
Хоча кількість виправлених вразливостей цього місяця менша, ніж минулого (570), вона все ще залишається значною порівняно з попередніми періодами.
Microsoft попередила про можливе зростання кількості оновлень безпеки, оскільки компанія почала використовувати систему виявлення вразливостей на базі ШІ для пошуку більшої кількості проблем у своїх програмних продуктах.
Додаткову інформацію про небезпечні оновлення можна знайти в окремих статтях щодо кумулятивних оновлень Windows 11 KB5121003 та KB5120240, а також оновлення розширеної безпеки Windows 10 KB5120249.
Microsoft виправляє 3 вразливості нульового дня
Цього місяця Microsoft усунула три вразливості нульового дня: одна з них активно експлуатувалася, а дві були публічно розголошені.
Microsoft класифікує вразливість нульового дня як публічно розголошену або активно експлуатовану за відсутності офіційного виправлення.
До активно експлуатованих вразливостей нульового дня, виправлених цього місяця, належать:
CVE-2026-68820 – Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft виправила активно експлуатовану вразливість у драйвері Windows Ancillary Function Driver for WinSock, яка надавала привілеї рівня SYSTEM.
“Використання після звільнення пам’яті (Use after free) у драйвері Windows Ancillary Function Driver for WinSock дозволяє авторизованому зловмиснику локально підвищити свої привілеї”, — попереджає Microsoft.
“Локальний автентифікований зловмисник міг би запустити спеціально створену програму на ураженій системі, щоб спровокувати стан гонитви (race condition). Успішна експлуатація могла б дозволити зловмиснику отримати привілеї SYSTEM. Взаємодія з користувачем не потрібна”, — додає Microsoft.
За виявлення цих вразливостей відповідальними є Моше Марелус (Moshe Marelus) та Девід Дрікер (David Driker) з Checkpoint.
У своєму звіті, опублікованому сьогодні, Check Point стверджує, що ця вразливість була використана в атаках нульового дня групою Lazarus, яка пов’язана з Північною Кореєю, для розгортання шкідливого програмного забезпечення.
“Під час вторгнення зловмисник експлуатував CVE-2026-68820, вразливість нульового дня в драйвері Microsoft AFD.sys, для розгортання нової версії FudModule, руткіта рівня ядра від Lazarus”, — повідомили в Check Point.
Microsoft не надала деталей щодо того, як саме були експлуатовані ці вразливості.
Дві публічно розголошені вразливості нульового дня, які були виправлені:
CVE-2026-62832 – Windows User Profile Service Elevation of Privilege Vulnerability
Microsoft виправила публічно розголошену вразливість, що дозволяє підвищити привілеї, у службі профілів користувачів Windows, яка надає адміністративні права.
“Неналежне вирішення посилань перед доступом до файлів (“link following”) у службі профілів користувачів Windows дозволяє авторизованому зловмиснику локально підвищити свої привілеї”, — пояснює Microsoft.
“Автентифікований зловмисник, який має облікові дані іншого локального облікового запису, міг би запустити спеціально створену програму для завантаження реєстрового hive іншого користувача. Успішна експлуатація могла б дозволити зловмиснику отримати доступ до даних іншого користувача або змінити їх, а також отримати адміністративні привілеї. Взаємодія з користувачем не потрібна”, — додає Microsoft.
Хоча Microsoft приписує виявлення цієї вразливості анонімному досліднику, деталі збігаються з вразливістю нульового дня під назвою “LegacyHive”, яка була розкрита дослідником безпеки на ім’я Nightmare Eclipse минулого місяця.
Вілл Дорманн (Will Dormann), головний аналітик уразливостей компанії Tharros, раніше зазначав, що непривілейовані користувачі можуть експлуатувати LegacyHive для модифікації реєстрового hive, щоб запускати команди з адміністративними привілеями, коли обліковий запис адміністратора входить у скомпрометований пристрій.
CVE-2026-72971 – Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
Microsoft виправила публічно розголошену вразливість, що дозволяє підвищити привілеї, у службі профілів користувачів Windows, яка надає адміністративні права.
“Неналежне вирішення посилань перед доступом до файлів (“link following”) у драйвері фільтра ізоляції контейнерів Windows (unionfs.sys) дозволяє авторизованому зловмиснику локально виконувати модифікацію даних”, — пояснює Microsoft.
“Автентифікований зловмисник, який має облікові дані іншого локального облікового запису, міг би запустити спеціально створену програму для завантаження реєстрового hive іншого користувача. Успішна експлуатація могла б дозволити зловмиснику отримати доступ до даних іншого користувача або змінити їх, а також отримати адміністративні привілеї. Взаємодія з користувачем не потрібна”, — додає Microsoft.
Microsoft не розкрила, де саме було зроблено це відкриття, але приписує його виявлення yhw & txz.
Інші постачальники, які випустили оновлення або консультації в серпні 2026 року, включають:
- Adobe випустила оновлення безпеки для вразливостей у Coldfusion, Commerce, Lightroom Classic, Content Credentials SDK та Campaign Classic.
- Cisco випустила оновлення безпеки для численних продуктів, включаючи Cisco Catalyst SD-WAN, IOS, IOS XE, та вразливості ClamAV з публічними експлойтами.
- Metabase випустила оновлення безпеки для критичної SQLi-вразливості, яка експлуатувалася в атаках викрадення даних.
- N-able випустила оновлення безпеки для активно експлуатованої вразливості обходу автентифікації (CVE-2026-18577), що впливає як на хмарні, так і на локальні сервери N-central.
- SAP випустила серпневі оновлення безпеки для багатьох продуктів, включаючи вразливість з рівнем серйозності 10.0 неправильної авторизації в SAP Commerce Cloud (Data Hub Adapter).
- TP-Link виправила 15 вразливостей у механізмі нульового доступу (ZTP) своїх мережевих пристроїв Omada, які могли призвести до віддаленого виконання коду.
- VMware випустила оновлення безпеки для VMware Avi Load Balancer, які включають обхід автентифікації та вразливості віддаленого виконання коду.
Оновлення безпеки Microsoft Patch Tuesday за серпень 2026 року
Нижче наведено повний список виправлених вразливостей у рамках оновлень August 2026 Patch Tuesday, за винятком тих, що були виправлені до сьогодні.
Щоб ознайомитися з повним описом кожної вразливості та систем, на які вона впливає, перегляньте повний звіт тут.
| Тег | CVE ID | Назва CVE | Рівень серйозності |
|---|---|---|---|
| .NET | CVE-2026-58641 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-62901 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-70354 | .NET Core Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-62899 | .NET Security Feature Bypass Vulnerability | Important |
| .NET | CVE-2026-62902 | .NET Information Disclosure Vulnerability | Important |
| .NET | CVE-2026-62900 | .NET Information Disclosure Vulnerability | Important |
| .NET | CVE-2026-62886 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-62909 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-62871 | .NET Elevation of Privilege Vulnerability | Important |
| .NET Framework | CVE-2026-65810 | .NET Framework Elevation of Privilege Vulnerability | Important |
| .NET Framework | CVE-2026-62872 | .NET Framework Elevation of Privilege Vulnerability | Important |
| .NET Framework | CVE-2026-62897 | .NET Framework Remote Code Execution Vulnerability | Important |
| Active Directory Certificate Services (AD CS) | CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | Critical |
| AMD Zen | CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability | Important |
| AMD Zen | CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability | Important |
| Application Information Services | CVE-2026-61357 | Application Information Services Elevation of Privilege Vulnerability | Important |
| Application Insights Profiler | CVE-2026-49163 | Application Insights Profiler Elevation of Privilege Vulnerability | Critical |
| Azure Active Directory | CVE-2026-50481 | Azure Active Directory Elevation of Privilege Vulnerability | Critical |
| Azure Confidential Ledger | CVE-2026-68823 | Azure Confidential Ledger Remote Code Execution Vulnerability | Critical |
| Azure CycleCloud | CVE-2026-65806 | Azure CycleCloud Information Disclosure Vulnerability | Important |
| Azure CycleCloud | CVE-2026-70340 | Azure CycleCloud Elevation of Privilege Vulnerability | Important |
| Azure Entra ID | CVE-2026-62869 | Azure Entra ID Spoofing Vulnerability | Critical |
| Azure Logic Apps | CVE-2026-56161 | Azure Logic Apps Information Disclosure Vulnerability | Critical |
| Azure Monitor Agent | CVE-2026-47299 | Azure Monitor Agent Elevation of Privilege Vulnerability | Important |
| Azure Service Bus | CVE-2026-50515 | Azure Service Bus Remote Code Execution Vulnerability | Critical |
| Azure SQL Database | CVE-2026-63522 | Azure SQL Database Elevation of Privilege Vulnerability | Critical |
| Azure SQL Database | CVE-2026-56162 | Azure SQL Database Elevation of Privilege Vulnerability | Critical |
| Azure SQL Managed Instance | CVE-2026-62836 | Azure SQL Managed Instance Elevation of Privilege Vulnerability | Critical |
| Azure SRE Agent | CVE-2026-62830 | Azure SRE Agent Elevation of Privilege Vulnerability | Critical |
| Azure Storage Explorer | CVE-2026-57104 | Azure Storage Explorer Elevation of Privilege Vulnerability | Important |
| Capability Access Management Service (camsvc) | CVE-2026-62892 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-65788 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-65786 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-65787 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Dynamics Business Central | CVE-2026-40375 | Microsoft Dynamics Business Central Information Disclosure Vulnerability | Important |
| GitHub Copilot and Visual Studio Code | CVE-2026-70335 | GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | Important |
| Microsoft 365 Admin Center | CVE-2026-62873 | Microsoft 365 Admin Center Elevation of Privilege Vulnerability | Critical |
| Microsoft Azure Attestation service and Device Health Attestation Service | CVE-2026-71331 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Critical |
| Microsoft Azure Attestation service and Device Health Attestation Service | CVE-2026-66802 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Critical |
| Microsoft Azure Kubernetes Service | CVE-2026-50516 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | Critical |
| Microsoft COM for Windows | CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability | Important |
| Microsoft Defender for Endpoint | CVE-2026-54123 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | Important |
| Microsoft Digest Authentication | CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability | Important |
| Microsoft Dynamics 365 (on-premises) | CVE-2026-65815 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Important |
| Microsoft Dynamics 365 (on-premises) | CVE-2026-66301 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | Important |
| Microsoft Entra Connect Sync | CVE-2026-65673 | Microsoft Entra Connect Elevation of Privilege Vulnerability | Important |
| Microsoft Entra Provisioning Service (SyncFabric) | CVE-2026-59115 | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability | Critical |
| Microsoft Exchange Server | CVE-2026-65813 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-62915 | Microsoft Exchange Server Security Feature Bypass Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-62913 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-62914 | Microsoft Exchange Server Spoofing Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-62912 | Microsoft Exchange Server Denial of Service Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Critical |
| Microsoft Exchange Server | CVE-2026-62910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft High Performance Computing (HPC) Pack | CVE-2026-59124 | Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability | Important |
| Microsoft High Performance Computing (HPC) Pack | CVE-2026-59133 | Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability | Important |
| Microsoft Local Security Authority Server (lsasrv) | CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-65661 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-63517 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-63515 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-63519 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-65656 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-65664 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-63513 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-68792 | Microsoft Office Elevation of Privilege Vulnerability | Important |
| Microsoft Office | CVE-2026-65657 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-64910 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-64909 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-63532 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-63529 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-64911 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-64899 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-64898 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-64903 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-63533 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-64904 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-70315 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-70314 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-66807 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-70130 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-66809 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-63524 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-63526 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-62842 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-70317 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-70323 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office Access | CVE-2026-64908 | Microsoft Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-64914 | Microsoft Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-64919 | Microsoft Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-64920 | Microsoft Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-64906 | Microsoft Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-64912 | Microsoft Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68795 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68796 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68800 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-65807 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68793 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68794 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-68802 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-70318 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68817 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68814 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-70328 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-70327 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68798 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68812 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68803 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68801 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68799 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68805 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68797 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68804 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-68815 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68813 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68811 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68810 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68808 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68816 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-68807 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-68806 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-62882 | Microsoft Outlook Spoofing Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-70329 | Microsoft Outlook Remote Code Execution Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-70325 | Powerpoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-70313 | Microsoft PowerPoint Remote Code Execution Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-70322 | Powerpoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-70312 | Powerpoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-68809 | Powerpoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-70320 | Powerpoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-70316 | Powerpoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-66808 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-66805 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-64901 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70321 | Microsoft SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-62837 | Microsoft SharePoint Server Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-62827 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-64897 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70355 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-63512 | Microsoft SharePoint Server Tampering Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-63516 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-63520 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-64900 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70324 | Microsoft SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-63514 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-57105 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-64921 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-64902 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-62829 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-64916 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70326 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-58639 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70306 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-65660 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-65663 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70332 | Microsoft Office SharePoint Spoofing Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-62839 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-62917 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-65658 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-64922 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| Microsoft Office Word | CVE-2026-64907 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-63518 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-64917 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-64905 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-64915 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70319 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-63521 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-66806 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70311 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70310 | Microsoft Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-66810 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-63525 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-63528 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-63530 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-58651 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-63531 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-63527 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft OneDrive | CVE-2026-65680 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability | Important |
| Microsoft Planetary Computer Pro | CVE-2026-63508 | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability | Critical |
| Microsoft Power Apps | CVE-2026-59118 | Microsoft Power Apps Elevation of Privilege Vulnerability | Critical |
| Microsoft PowerShell | CVE-2026-70338 | Microsoft PowerShell Security Feature Bypass Vulnerability | Important |
| Microsoft PowerShell | CVE-2026-59119 | PowerShell Elevation of Privilege Vulnerability | Important |
| Microsoft PowerShell Core | CVE-2026-70337 | Microsoft PowerShell Remote Code Execution Vulnerability | Important |
| Microsoft PowerShell Core | CVE-2026-58612 | PowerShell Information Disclosure Vulnerability | Important |
| Microsoft Purview eDiscovery | CVE-2026-65668 | Microsoft Purview eDiscovery Elevation of Privilege Vulnerability | Critical |
| Microsoft QUIC | CVE-2026-62898 | Microsoft QUIC Information Disclosure Vulnerability | Important |
| Microsoft QUIC | CVE-2026-62815 | Microsoft QUIC Remote Code Execution Vulnerability | Critical |
| Microsoft Remote Registry Service | CVE-2026-59138 | Microsoft Remote Registry Service Denial of Service Vulnerability | Important |
| Microsoft Remote Registry Service | CVE-2026-61345 | Microsoft Remote Registry Service Denial of Service Vulnerability | Important |
| Microsoft Teams | CVE-2026-62896 | Microsoft Teams Elevation of Privilege Vulnerability | Critical |
| Microsoft Teams | CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability | Critical |
| Microsoft Teams | CVE-2026-62918 | Microsoft Teams Spoofing Vulnerability | Critical |
| Microsoft Teams for Android | CVE-2026-65768 | Microsoft Teams Remote Code Execution Vulnerability | Important |
| Microsoft Teams for Android | CVE-2026-65767 | Microsoft Teams for Android and iOS Spoofing Vulnerability | Important |
| Microsoft Teams Mobile | CVE-2026-65769 | Microsoft Teams iOS Information Disclosure Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important |
| Power BI | CVE-2026-65811 | Power BI Remote Code Execution Vulnerability | Important |
| Reliable Multicast Transport Driver (RMCAST) | CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical |
| Remote Desktop Client | CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| Remote Desktop Client | CVE-2026-61924 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Remote Desktop Client | CVE-2026-61921 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Remote Desktop Client | CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-61363 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-61352 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-61918 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| RPC Runtime | CVE-2026-62781 | RPC Runtime Library Remote Code Execution Vulnerability | Important |
| User-Mode Power Service (UMPS) | CVE-2026-62721 | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | Important |
| Virtual Hard Disk (VHD) Miniport Driver | CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important |
| Visual Studio Code | CVE-2026-59113 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Visual Studio Code | CVE-2026-47285 | Visual Studio Code Information Disclosure Vulnerability | Important |
| Visual Studio Code | CVE-2026-58650 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-69306 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-69278 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-69320 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Visual Studio Code | CVE-2026-70336 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Visual Studio Code – Python extension | CVE-2026-54981 | Visual Studio Code Python Extension Security Feature Bypass Vulnerability | Important |
| Visual Studio Code CoPilot Chat Extension | CVE-2026-65675 | CoPilot Chat Security Feature Bypass Vulnerability | Important |
| Windows Accessibility Infrastructure (ATBroker.exe) | CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | Important |
| Windows Active Directory | CVE-2026-65777 | Active Directory Security Feature Bypass Vulnerability | Important |
| Windows Active Directory | CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Autopilot | CVE-2026-65781 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| Windows Autopilot | CVE-2026-65783 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| Windows Autopilot | CVE-2026-65782 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| Windows Autopilot | CVE-2026-65779 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| Windows Autopilot | CVE-2026-65780 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| Windows Autopilot | CVE-2026-65778 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| Windows Backup Engine | CVE-2026-62908 | Windows Backup Engine Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-61934 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-62705 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-62722 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-61927 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-62771 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Common Log File System Driver | CVE-2026-62728 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-62775 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-62772 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Important |
| Windows Cross Device Service | CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | Important |
| Windows Defender Firewall Service | CVE-2026-61936 | Windows Defender Firewall Service Security Feature Bypass Vulnerability | Important |
| Windows Deployment Services | CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | Critical |
| Windows Device Association Service | CVE-2026-62747 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| Windows Device Association Service | CVE-2026-62710 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| Windows DHCP Client | CVE-2026-61361 | Windows DHCP Client Remote Code Execution Vulnerability | Important |
| Windows DHCP Client | CVE-2026-62755 | Windows DHCP Client Elevation of Privilege Vulnerability | Important |
| Windows DHCP Client | CVE-2026-65785 | Windows DHCP Client Denial of Service Vulnerability | Important |
| Windows DHCP Client | CVE-2026-62736 | Windows DHCP Client Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62742 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-62776 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62812 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62720 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62745 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62803 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62714 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62814 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62807 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62715 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62716 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62718 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| Windows DHCP Server | CVE-2026-62761 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| Windows Display Enhancement Service | CVE-2026-61923 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-70304 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-62778 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-61920 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| Windows DNS | CVE-2026-62883 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-62881 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-62769 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| Windows DNS | CVE-2026-62787 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| Windows DNS | CVE-2026-62820 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| Windows DNS | CVE-2026-65789 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| Windows DNS | CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| Windows DNS | CVE-2026-65799 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-65798 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-65797 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-65795 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-70330 | Windows DNS Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-62894 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-61933 | Windows DWM Core Library Information Disclosure Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-61932 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-62703 | Windows DWM Core Library Information Disclosure Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows Encrypting File System (EFS) | CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-61347 | Windows Event Logging Service Information Disclosure Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability | Important |
| Windows GDI | CVE-2026-61360 | Windows GDI Information Disclosure Vulnerability | Important |
| Windows GDI | CVE-2026-65662 | Windows GDI Information Disclosure Vulnerability | Important |
| Windows GDI+ | CVE-2026-62709 | Windows GDI+ Information Disclosure Vulnerability | Important |
| Windows GDI+ | CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability | Critical |
| Windows GDI+ | CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability | Critical |
| Windows Graphics Kernel | CVE-2026-62774 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Graphics Kernel | CVE-2026-62702 | Windows Graphics Kernel Denial of Service Vulnerability | Important |
| Windows Graphics Kernel | CVE-2026-61346 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Hello | CVE-2026-61928 | Windows Hello Tampering Vulnerability | Important |
| Windows HTTP Protocol Stack | CVE-2026-62750 | Windows HTTP Protocol Stack Tampering Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-62753 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-61937 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-62735 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-62811 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-62739 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2026-61368 | Windows Hyper-V Information Disclosure Vulnerability | Important |
| Windows Imaging Component | CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability | Important |
| Windows Imaging Component | CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability | Important |
| Windows Installer | CVE-2026-70344 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-70346 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-70345 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-61938 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-65774 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-70347 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-62768 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows iSCSI Target Service | CVE-2026-65796 | Windows iSCSI Target Service Denial of Service Vulnerability | Important |
| Windows iSCSI Target Service | CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Critical |
| Windows iSCSI Target Service | CVE-2026-65679 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Important |
| Windows iSCSI Target Service | CVE-2026-65681 | Windows iSCSI Target Service Denial of Service Vulnerability | Important |
| Windows Kerberos | CVE-2026-62752 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| Windows Kerberos | CVE-2026-62773 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| Windows Kerberos | CVE-2026-62754 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| Windows Kerberos | CVE-2026-62766 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-62788 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-62749 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-62780 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability | Important |
| Windows Kernel | CVE-2026-61929 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-62708 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-62737 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-65773 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Key Guard | CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability | Critical |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2026-62795 | Windows LDAP – Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2026-62785 | Windows LDAP – Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Important |
| Windows License Manager | CVE-2026-62777 | Windows License Manager Elevation of Privilege Vulnerability | Important |
| Windows LUAFV | CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Management Instrumentation | CVE-2026-62738 | Windows Management Instrumentation Information Disclosure Vulnerability | Important |
| Windows Management Services | CVE-2026-70348 | Windows Management Services Denial of Service Vulnerability | Important |
| Windows Message Queuing | CVE-2026-62719 | Windows Message Queuing Elevation of Privilege Vulnerability | Important |
| Windows Message Queuing | CVE-2026-65790 | Windows Message Queuing Elevation of Privilege Vulnerability | Important |
| Windows Message Queuing | CVE-2026-62717 | Windows Message Queuing Elevation of Privilege Vulnerability | Important |
| Windows MIDI Service Module | CVE-2026-62693 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows MIDI Service Module | CVE-2026-62688 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-62707 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important |
| Windows Narrator Braille | CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability | Important |
| Windows Network Address Translation (NAT) | CVE-2026-56179 | Windows Network Address Translation (NAT) Spoofing Vulnerability | Moderate |
| Windows Network Connection Broker | CVE-2026-61366 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Important |
| Windows Network File System | CVE-2026-68819 | Windows Network File System Denial of Service Vulnerability | Important |
| Windows NTFS | CVE-2026-65784 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-62700 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-62796 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-62797 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-62887 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-62793 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-62880 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-61350 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows Package Manager | CVE-2026-68821 | Windows Package Manager Elevation of Privilege Vulnerability | Important |
| Windows Program Compatibility Assistant Service | CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| Windows Projected File System | CVE-2026-62751 | Windows Projected File System Elevation of Privilege Vulnerability | Important |
| Windows Push Notifications | CVE-2026-62690 | Windows Push Notifications Elevation of Privilege Vulnerability | Important |
| Windows Remote Access API | CVE-2026-65671 | Remote Access API Elevation of Privilege Vulnerability | Important |
| Windows Remote Access API | CVE-2026-65672 | Remote Access API Elevation of Privilege Vulnerability | Important |
| Windows Remote Access Connection Manager | CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important |
| Windows Remote Access Connection Manager | CVE-2026-62758 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important |
| Windows Remote Desktop Services | CVE-2026-61356 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| Windows Remote Desktop Services | CVE-2026-61364 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| Windows Remote Desktop Services | CVE-2026-61367 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| Windows Remote Desktop Services | CVE-2026-62692 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| Windows Remote Desktop Services | CVE-2026-61365 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical |
| Windows RPC API | CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Important |
| Windows Schannel | CVE-2026-62757 | Windows Schannel Security Feature Bypass Vulnerability | Important |
| Windows Schannel | CVE-2026-62779 | Windows Schannel Elevation of Privilege Vulnerability | Important |
| Windows Secure Socket Tunneling Protocol (SSTP) | CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Critical |
| Windows Sensor Data Service | CVE-2026-61355 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Important |
| Windows Shell | CVE-2026-62770 | Windows Shell Elevation of Privilege Vulnerability | Important |
| Windows SMB Client | CVE-2026-62799 | Windows SMB Client Elevation of Privilege Vulnerability | Important |
| Windows SMB Client | CVE-2026-65794 | Windows SMB Client Information Disclosure Vulnerability | Important |
| Windows SMB Client | CVE-2026-62782 | Windows SMB Client Information Disclosure Vulnerability | Important |
| Windows SMB Server | CVE-2026-62790 | Windows SMBv3 Server Remote Code Execution Vulnerability | Important |
| Windows SMB Server | CVE-2026-62800 | Windows SMBv3 Server Remote Code Execution Vulnerability | Important |
| Windows Storage | CVE-2026-61359 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-62695 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage Port Driver | CVE-2026-65814 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability | Important |
| Windows TCP/IP | CVE-2026-62792 | Windows TCP/IP Remote Code Execution Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62701 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62725 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-61353 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62748 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62723 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62724 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62729 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62726 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62734 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows Telephony Service | CVE-2026-62732 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| Windows TPM | CVE-2026-6727 | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | Important |
| Windows TPM | CVE-2026-6726 | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | Important |
| Windows USB Driver | CVE-2026-61926 | Windows USB Driver Elevation of Privilege Vulnerability | Important |
| Windows User Profile Service | CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-65678 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-62746 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32K | CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-65776 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-62885 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-62876 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-62711 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-62733 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-62743 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32K | CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-62786 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32K | CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-62798 | Win32k Information Disclosure Vulnerability | Important |
| Windows Wired AutoConfig Service | CVE-2026-62730 | Windows Wired AutoConfig Service Information Disclosure Vulnerability | Important |
| Windows Work Folder Service | CVE-2026-61349 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important |
| Winlogon | CVE-2026-61939 | Winlogon Elevation of Privilege Vulnerability | Important |
Щойно зловмисники отримують облікові дані, лише 37% їхніх дій блокується.
Загальні показники запобігання можуть приховувати те, що відбувається після первинного доступу. Коли зловмисники використовують дійсні облікові дані, рівень запобігання різко падає.
Звіт Blue Report 2026 оцінює захисні механізми за кожною технікою, використовуючи 338 мільйонів симуляцій, проведених у виробничих середовищах клієнтів.
Пов’язані статті:
Microsoft Patch Tuesday за липень 2026 року: виправлено 570 вразливостей, 3 з них — нульового дня
Microsoft випустила оновлення розширеної безпеки для Windows 10 KB5099539
Microsoft випустила оновлення розширеної безпеки для Windows 10 KB5120249
Check Point попереджає про експлуатовану в атаках вразливість нульового дня в SmartConsole
Випущено кумулятивні оновлення для Windows 11 KB5101650 та KB5099414
- Microsoft
- Patch Tuesday
- Security Update
- Vulnerability
- Windows Update
- Zero-Day
За даними порталу: www.bleepingcomputer.com