FHN 
Microsoft’s August 2026 security release is a big one. The company has fixed 394 vulnerabilities across its software ecosystem, covering Windows, Office, SharePoint, Azure, PowerShell, .NET, Visual Studio Code, and other products.
The update was released on August 11, 2026, and security teams have another important reason to move quickly: three of the vulnerabilities were already publicly known or are being actively exploited, according to Microsoft’s advisory information.
For organizations with large Microsoft environments, this is a release that should be reviewed early rather than left for the normal monthly patching cycle.
Three Vulnerabilities Need Immediate Attention
The most important issues this month involve Windows components.
CVE-2026-72971 affects the Windows Container Isolation File System Filter Driver (unionfs.sys). Microsoft rates it as Important and says the vulnerability was publicly disclosed before the security update was released. The issue could allow an attacker to tamper with protected system or container-related data.
Another publicly disclosed issue, CVE-2026-62832, affects the Windows User Profile Service. It is an elevation-of-privilege vulnerability, meaning an attacker with an existing foothold could potentially use it to obtain additional permissions on a vulnerable machine.
The biggest concern is CVE-2026-68820. Microsoft lists this Windows WinSock-related vulnerability as actively exploited in the wild. Because attackers are already using the flaw, organizations should give this update priority and investigate potentially affected endpoints.
Where the 394 Vulnerabilities Fall
The vulnerabilities fixed this month cover several major security categories:
| Category | Count |
|---|---|
| Elevation of Privilege | 150 |
| Remote Code Execution | 132 |
| Information Disclosure | 66 |
| Spoofing | 21 |
| Denial of Service | 12 |
| Security Feature Bypass | 9 |
| Tampering | 4 |
| Total | 394 |
The numbers show that privilege escalation and remote code execution continue to make up a significant portion of Microsoft’s monthly security workload.
For defenders, this means patching should not focus only on vulnerabilities carrying a Critical rating. An Important vulnerability can still become dangerous when it is combined with another weakness or used after an attacker gains initial access.
SharePoint Remains a Key Target
Several SharePoint Server vulnerabilities are included in the August release.
Among them are CVE-2026-70355, CVE-2026-70326, and CVE-2026-70324, which involve privilege escalation, as well as CVE-2026-70321, a remote code execution vulnerability.
SharePoint environments deserve special attention because they often sit close to valuable corporate information. A compromised server could potentially give attackers access to documents, accounts, internal applications, or other parts of an organization’s environment.
Companies running internet-accessible SharePoint servers should therefore make these systems a priority during their patching process.
Azure and Windows Infrastructure Also Affected
The update includes CVE-2026-71331, a Critical remote code execution vulnerability involving Microsoft Azure Attestation and Device Health Attestation services.
Issues affecting cloud and device-trust infrastructure can have broader implications because these services may be part of an organization’s authentication and security architecture.
Windows infrastructure is also covered by several fixes, including vulnerabilities affecting DNS, Windows Management Services, Windows Installer, and other system components.
Organizations should identify which of these services are actually deployed in their environments and prioritize systems that are externally accessible or support critical business operations.
Don’t Forget PowerShell and Developer Machines
Microsoft has also patched vulnerabilities in PowerShell Core and .NET.
One PowerShell issue, CVE-2026-70337, could lead to remote code execution, while CVE-2026-70338 involves a security feature bypass.
This is particularly relevant to security teams because PowerShell is both an essential administration tool and a common technique used during attacks. Keeping the platform patched should go hand in hand with monitoring suspicious PowerShell activity.
Developer environments should also be included in patching plans. Vulnerabilities affecting Visual Studio Code and GitHub Copilot could create additional risk when compromised developer machines have access to source repositories, cloud credentials, or CI/CD infrastructure.
A developer endpoint is not just another workstation. In many organizations, it can provide a pathway into systems that are critical to software development and production deployment.
Microsoft Office Is Part of the Release
Office applications receive their share of security fixes as well.
The August updates cover Outlook, Word, Excel, PowerPoint, and Microsoft Office, including remote code execution and information-disclosure vulnerabilities.
These issues deserve attention because attackers frequently use Office documents and email as an entry point for phishing and malware campaigns. A vulnerability that appears less urgent in isolation can become much more serious when combined with social engineering.
What Security Teams Should Do Now
The size of this month’s release can make patching 394 vulnerabilities seem overwhelming. The practical approach is to prioritize based on exposure and exploitability.
Start with the vulnerabilities that are actively exploited or publicly disclosed. Next, focus on Critical vulnerabilities and systems exposed to the internet, particularly SharePoint and important Azure or Windows infrastructure.
After that, review developer workstations, PowerShell installations, Office applications, and other Microsoft products used across the organization.
Teams should also use this update as an opportunity to check whether vulnerable systems are being properly identified through asset inventories and vulnerability-management tools.
The key takeaway from Microsoft’s August 2026 release is simple: don’t treat Patch Tuesday as just another routine update cycle. With 394 vulnerabilities addressed and an actively exploited Windows flaw among them, organizations should move quickly to identify their exposure and deploy the appropriate security fixes.
| CVE Number | CVE Title | Max Severity |
|---|---|---|
| CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Important |
| CVE-2026-71331 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Critical |
| CVE-2026-70355 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-70354 | .NET Core Remote Code Execution Vulnerability | Important |
| CVE-2026-70348 | Windows Management Services Denial of Service Vulnerability | Important |
| CVE-2026-70347 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-70346 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-70345 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-70344 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-70340 | Azure CycleCloud Elevation of Privilege Vulnerability | Important |
| CVE-2026-70338 | Microsoft PowerShell Security Feature Bypass Vulnerability | Important |
| CVE-2026-70337 | Microsoft PowerShell Remote Code Execution Vulnerability | Important |
| CVE-2026-70336 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| CVE-2026-70335 | GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | Important |
| CVE-2026-70330 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-70329 | Microsoft Outlook Remote Code Execution Vulnerability | Important |
| CVE-2026-70328 | Microsoft Excel Information Disclosure Vulnerability | Important |
| CVE-2026-70327 | Microsoft Excel Information Disclosure Vulnerability | Important |
| CVE-2026-70326 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-70325 | Powerpoint Information Disclosure Vulnerability | Important |
| CVE-2026-70324 | Microsoft SharePoint Elevation of Privilege Vulnerability | Important |
| CVE-2026-70323 | Microsoft Office Information Disclosure Vulnerability | Important |
| CVE-2026-70322 | Powerpoint Information Disclosure Vulnerability | Important |
| CVE-2026-70321 | Microsoft SharePoint Remote Code Execution Vulnerability | Important |
| CVE-2026-70320 | Powerpoint Information Disclosure Vulnerability | Important |
| CVE-2026-70319 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| CVE-2026-70318 | Microsoft Excel Information Disclosure Vulnerability | Important |
| CVE-2026-70317 | Microsoft Office Information Disclosure Vulnerability | Important |
| CVE-2026-70316 | Powerpoint Information Disclosure Vulnerability | Important |
| CVE-2026-70315 | Microsoft Office Information Disclosure Vulnerability | Important |
| CVE-2026-70314 | Microsoft Office Information Disclosure Vulnerability | Important |
| CVE-2026-70313 | Microsoft PowerPoint Remote Code Execution Vulnerability | Important |
| CVE-2026-70312 | Powerpoint Information Disclosure Vulnerability | Important |
| CVE-2026-70311 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| CVE-2026-70310 | Microsoft Word Information Disclosure Vulnerability | Important |
| CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| CVE-2026-70306 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| CVE-2026-70304 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-70130 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-69320 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| CVE-2026-69306 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| CVE-2026-69278 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| CVE-2026-68821 | Windows Package Manager Elevation of Privilege Vulnerability | Important |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| CVE-2026-68819 | Windows Network File System Denial of Service Vulnerability | Important |
| CVE-2026-68817 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68816 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| CVE-2026-68815 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68814 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68813 | Microsoft Excel Information Disclosure Vulnerability | Important |
| CVE-2026-68812 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68811 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68810 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68809 | Powerpoint Information Disclosure Vulnerability | Important |
| CVE-2026-68808 | Microsoft Excel Information Disclosure Vulnerability | Important |
| CVE-2026-68807 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68806 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68805 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68804 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| CVE-2026-68803 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68802 | Microsoft Excel Information Disclosure Vulnerability | Important |
| CVE-2026-68801 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68800 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68799 | Microsoft Excel Information Disclosure Vulnerability | Important |
| CVE-2026-68798 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68797 | Microsoft Excel Information Disclosure Vulnerability | Important |
| CVE-2026-68796 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68795 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68794 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| CVE-2026-68793 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-68792 | Microsoft Office Elevation of Privilege Vulnerability | Important |
| CVE-2026-66810 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| CVE-2026-66809 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Important |
| CVE-2026-66808 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| CVE-2026-66807 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| CVE-2026-66806 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| CVE-2026-66805 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-66802 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Critical |
| CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability | Critical |
| CVE-2026-66301 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | Important |
| CVE-2026-65815 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Important |
| CVE-2026-65814 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-65813 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-65811 | Power BI Remote Code Execution Vulnerability | Important |
| CVE-2026-65810 | .NET Framework Elevation of Privilege Vulnerability | Important |
| CVE-2026-65807 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| CVE-2026-65806 | Azure CycleCloud Information Disclosure Vulnerability | Important |
| CVE-2026-65799 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-65798 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-65797 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-65796 | Windows iSCSI Target Service Denial of Service Vulnerability | Important |
| CVE-2026-65795 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-65794 | Windows SMB Client Information Disclosure Vulnerability | Important |
| CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Critical |
| CVE-2026-65790 | Windows Message Queuing Elevation of Privilege Vulnerability | Important |
| CVE-2026-65789 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| CVE-2026-65788 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| CVE-2026-65787 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| CVE-2026-65786 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| CVE-2026-65785 | Windows DHCP Client Denial of Service Vulnerability | Important |
| CVE-2026-65784 | Windows NTFS Information Disclosure Vulnerability | Important |
| CVE-2026-65783 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| CVE-2026-65782 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| CVE-2026-65781 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| CVE-2026-65780 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| CVE-2026-65779 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| CVE-2026-65778 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| CVE-2026-65777 | Active Directory Security Feature Bypass Vulnerability | Important |
| CVE-2026-65776 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-65774 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-65773 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-65769 | Microsoft Teams iOS Information Disclosure Vulnerability | Important |
| CVE-2026-65768 | Microsoft Teams Remote Code Execution Vulnerability | Important |
| CVE-2026-65767 | Microsoft Teams for Android and iOS Spoofing Vulnerability | Important |
| CVE-2026-65681 | Windows iSCSI Target Service Denial of Service Vulnerability | Important |
| CVE-2026-65680 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability | Important |
| CVE-2026-65679 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Important |
| CVE-2026-65678 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-65675 | CoPilot Chat Security Feature Bypass Vulnerability | Important |
| CVE-2026-65673 | Microsoft Entra Connect Elevation of Privilege Vulnerability | Important |
| CVE-2026-65672 | Remote Access API Elevation of Privilege Vulnerability | Important |
| CVE-2026-65671 | Remote Access API Elevation of Privilege Vulnerability | Important |
| CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Critical |
| CVE-2026-65664 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| CVE-2026-65663 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| CVE-2026-65662 | Windows GDI Information Disclosure Vulnerability | Important |
| CVE-2026-65661 | Microsoft Office Remote Code Execution Vulnerability | Important |
| CVE-2026-65660 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-65658 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| CVE-2026-65657 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-65656 | Microsoft Office Remote Code Execution Vulnerability | Important |
| CVE-2026-64922 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-64921 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Critical |
| CVE-2026-64920 | Microsoft Access Remote Code Execution Vulnerability | Important |
| CVE-2026-64919 | Microsoft Access Remote Code Execution Vulnerability | Important |
| CVE-2026-64917 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| CVE-2026-64916 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-64915 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| CVE-2026-64914 | Microsoft Access Remote Code Execution Vulnerability | Important |
| CVE-2026-64912 | Microsoft Access Remote Code Execution Vulnerability | Important |
| CVE-2026-64911 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-64910 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-64909 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-64908 | Microsoft Access Remote Code Execution Vulnerability | Important |
| CVE-2026-64907 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| CVE-2026-64906 | Microsoft Access Remote Code Execution Vulnerability | Important |
| CVE-2026-64905 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| CVE-2026-64904 | Microsoft Office Remote Code Execution Vulnerability | Important |
| CVE-2026-64903 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-64902 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-64901 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| CVE-2026-64900 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-64899 | Microsoft Office Information Disclosure Vulnerability | Important |
| CVE-2026-64898 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-64897 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-63533 | Microsoft Office Remote Code Execution Vulnerability | Important |
| CVE-2026-63532 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-63531 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| CVE-2026-63530 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| CVE-2026-63529 | Microsoft Office Information Disclosure Vulnerability | Important |
| CVE-2026-63528 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| CVE-2026-63527 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| CVE-2026-63526 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| CVE-2026-63525 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| CVE-2026-63524 | Microsoft Office Information Disclosure Vulnerability | Important |
| CVE-2026-63521 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| CVE-2026-63520 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| CVE-2026-63519 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| CVE-2026-63518 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| CVE-2026-63517 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Important |
| CVE-2026-63516 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-63515 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| CVE-2026-63514 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| CVE-2026-63513 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| CVE-2026-63512 | Microsoft SharePoint Server Tampering Vulnerability | Important |
| CVE-2026-62917 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-62915 | Microsoft Exchange Server Security Feature Bypass Vulnerability | Important |
| CVE-2026-62914 | Microsoft Exchange Server Spoofing Vulnerability | Important |
| CVE-2026-62913 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important |
| CVE-2026-62912 | Microsoft Exchange Server Denial of Service Vulnerability | Important |
| CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Critical |
| CVE-2026-62910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-62909 | .NET Elevation of Privilege Vulnerability | Important |
| CVE-2026-62908 | Windows Backup Engine Elevation of Privilege Vulnerability | Important |
| CVE-2026-62902 | .NET Information Disclosure Vulnerability | Important |
| CVE-2026-62901 | .NET Denial of Service Vulnerability | Important |
| CVE-2026-62900 | .NET Information Disclosure Vulnerability | Important |
| CVE-2026-62899 | .NET Security Feature Bypass Vulnerability | Important |
| CVE-2026-62898 | Microsoft QUIC Information Disclosure Vulnerability | Important |
| CVE-2026-62897 | .NET Framework Remote Code Execution Vulnerability | Important |
| CVE-2026-62894 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | Critical |
| CVE-2026-62892 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | Important |
| CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability | Critical |
| CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Critical |
| CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| CVE-2026-62887 | Windows NTFS Information Disclosure Vulnerability | Important |
| CVE-2026-62886 | .NET Elevation of Privilege Vulnerability | Important |
| CVE-2026-62885 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-62883 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-62882 | Microsoft Outlook Spoofing Vulnerability | Important |
| CVE-2026-62881 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-62880 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-62876 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-62872 | .NET Framework Elevation of Privilege Vulnerability | Important |
| CVE-2026-62871 | .NET Elevation of Privilege Vulnerability | Important |
| CVE-2026-62842 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Important |
| CVE-2026-62839 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-62837 | Microsoft SharePoint Server Information Disclosure Vulnerability | Important |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62829 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-62827 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Critical |
| CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | Critical |
| CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability | Critical |
| CVE-2026-62820 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical |
| CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | Critical |
| CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical |
| CVE-2026-62815 | Microsoft QUIC Remote Code Execution Vulnerability | Critical |
| CVE-2026-62814 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| CVE-2026-62812 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-62811 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| CVE-2026-62807 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-62803 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-62800 | Windows SMBv3 Server Remote Code Execution Vulnerability | Important |
| CVE-2026-62799 | Windows SMB Client Elevation of Privilege Vulnerability | Important |
| CVE-2026-62798 | Win32k Information Disclosure Vulnerability | Important |
| CVE-2026-62797 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| CVE-2026-62796 | Windows NTFS Information Disclosure Vulnerability | Important |
| CVE-2026-62795 | Windows LDAP – Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Important |
| CVE-2026-62793 | Windows NTFS Information Disclosure Vulnerability | Important |
| CVE-2026-62792 | Windows TCP/IP Remote Code Execution Vulnerability | Important |
| CVE-2026-62790 | Windows SMBv3 Server Remote Code Execution Vulnerability | Important |
| CVE-2026-62788 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-62787 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| CVE-2026-62786 | Win32k Information Disclosure Vulnerability | Important |
| CVE-2026-62785 | Windows LDAP – Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Important |
| CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | Important |
| CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important |
| CVE-2026-62782 | Windows SMB Client Information Disclosure Vulnerability | Important |
| CVE-2026-62781 | RPC Runtime Library Remote Code Execution Vulnerability | Important |
| CVE-2026-62780 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-62779 | Windows Schannel Elevation of Privilege Vulnerability | Important |
| CVE-2026-62778 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-62777 | Windows License Manager Elevation of Privilege Vulnerability | Important |
| CVE-2026-62776 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-62775 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | Important |
| CVE-2026-62774 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-62773 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| CVE-2026-62772 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Important |
| CVE-2026-62771 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-62770 | Windows Shell Elevation of Privilege Vulnerability | Important |
| CVE-2026-62769 | Windows DNS Elevation of Privilege Vulnerability | Important |
| CVE-2026-62768 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-62766 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| CVE-2026-62761 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| CVE-2026-62758 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important |
| CVE-2026-62757 | Windows Schannel Security Feature Bypass Vulnerability | Important |
| CVE-2026-62755 | Windows DHCP Client Elevation of Privilege Vulnerability | Important |
| CVE-2026-62754 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| CVE-2026-62753 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| CVE-2026-62752 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| CVE-2026-62751 | Windows Projected File System Elevation of Privilege Vulnerability | Important |
| CVE-2026-62750 | Windows HTTP Protocol Stack Tampering Vulnerability | Important |
| CVE-2026-62749 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-62748 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62747 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62746 | Win32k Information Disclosure Vulnerability | Important |
| CVE-2026-62745 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| CVE-2026-62743 | Win32k Information Disclosure Vulnerability | Important |
| CVE-2026-62742 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability | Important |
| CVE-2026-62739 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| CVE-2026-62738 | Windows Management Instrumentation Information Disclosure Vulnerability | Important |
| CVE-2026-62737 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-62736 | Windows DHCP Client Elevation of Privilege Vulnerability | Important |
| CVE-2026-62735 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| CVE-2026-62734 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62733 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-62732 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62730 | Windows Wired AutoConfig Service Information Disclosure Vulnerability | Important |
| CVE-2026-62729 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62728 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-62726 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62725 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62724 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62723 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62722 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-62721 | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | Important |
| CVE-2026-62720 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| CVE-2026-62719 | Windows Message Queuing Elevation of Privilege Vulnerability | Important |
| CVE-2026-62718 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| CVE-2026-62717 | Windows Message Queuing Elevation of Privilege Vulnerability | Important |
| CVE-2026-62716 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| CVE-2026-62715 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| CVE-2026-62714 | Windows DHCP Server Information Disclosure Vulnerability | Important |
| CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-62711 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| CVE-2026-62710 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62709 | Windows GDI+ Information Disclosure Vulnerability | Important |
| CVE-2026-62708 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-62707 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important |
| CVE-2026-62705 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-62703 | Windows DWM Core Library Information Disclosure Vulnerability | Important |
| CVE-2026-62702 | Windows Graphics Kernel Denial of Service Vulnerability | Important |
| CVE-2026-62701 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62700 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | Important |
| CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability | Important |
| CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-62695 | Windows Storage Elevation of Privilege Vulnerability | Important |
| CVE-2026-62693 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| CVE-2026-62692 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| CVE-2026-62690 | Windows Push Notifications Elevation of Privilege Vulnerability | Important |
| CVE-2026-62688 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| CVE-2026-61939 | Winlogon Elevation of Privilege Vulnerability | Important |
| CVE-2026-61938 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-61937 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important |
| CVE-2026-61936 | Windows Defender Firewall Service Security Feature Bypass Vulnerability | Important |
| CVE-2026-61934 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-61933 | Windows DWM Core Library Information Disclosure Vulnerability | Important |
| CVE-2026-61932 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-61929 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-61928 | Windows Hello Tampering Vulnerability | Important |
| CVE-2026-61927 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-61926 | Windows USB Driver Elevation of Privilege Vulnerability | Important |
| CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-61924 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| CVE-2026-61923 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-61921 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| CVE-2026-61920 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| CVE-2026-61918 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| CVE-2026-61368 | Windows Hyper-V Information Disclosure Vulnerability | Important |
| CVE-2026-61367 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| CVE-2026-61366 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Important |
| CVE-2026-61365 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| CVE-2026-61364 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| CVE-2026-61363 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| CVE-2026-61361 | Windows DHCP Client Remote Code Execution Vulnerability | Important |
| CVE-2026-61360 | Windows GDI Information Disclosure Vulnerability | Important |
| CVE-2026-61359 | Windows Storage Elevation of Privilege Vulnerability | Important |
| CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | Important |
| CVE-2026-61357 | Application Information Services Elevation of Privilege Vulnerability | Important |
| CVE-2026-61356 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important |
| CVE-2026-61355 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-61353 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-61352 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| CVE-2026-61350 | Windows NTFS Information Disclosure Vulnerability | Important |
| CVE-2026-61349 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| CVE-2026-61347 | Windows Event Logging Service Information Disclosure Vulnerability | Important |
| CVE-2026-61346 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Important |
| CVE-2026-61345 | Microsoft Remote Registry Service Denial of Service Vulnerability | Important |
| CVE-2026-59138 | Microsoft Remote Registry Service Denial of Service Vulnerability | Important |
| CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability | Important |
| CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability | Important |
| CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important |
| CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| CVE-2026-59133 | Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability | Important |
| CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability | Important |
| CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability | Important |
| CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability | Important |
| CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Important |
| CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability | Important |
| CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important |
| CVE-2026-59124 | Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability | Important |
| CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability | Important |
| CVE-2026-59119 | PowerShell Elevation of Privilege Vulnerability | Important |
| CVE-2026-59113 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| CVE-2026-58651 | Microsoft Word Remote Code Execution Vulnerability | Important |
| CVE-2026-58650 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| CVE-2026-58641 | .NET Elevation of Privilege Vulnerability | Important |
| CVE-2026-58639 | Microsoft SharePoint Server Spoofing Vulnerability | Important |
| CVE-2026-58612 | PowerShell Information Disclosure Vulnerability | Important |
| CVE-2026-57105 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| CVE-2026-57104 | Azure Storage Explorer Elevation of Privilege Vulnerability | Important |
| CVE-2026-56179 | Windows Network Address Translation (NAT) Spoofing Vulnerability | Moderate |
| CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability | Important |
| CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability | Important |
| CVE-2026-54981 | Visual Studio Code Python Extension Security Feature Bypass Vulnerability | Important |
| CVE-2026-54123 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | Important |
| CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability | Important |
| CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Important |
About the Author
