|
Tag |
CVE |
Base Score |
CVSS Vector |
Exploitability |
FAQs? |
Workarounds? |
Mitigations? |
|
Windows Deployment Services |
CVE-2026-0386 |
7.5 |
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
SQL Server |
CVE-2026-20803 |
7.2 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Hello |
CVE-2026-20804 |
7.7 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
No |
No |
No |
|
Desktop Window Manager |
CVE-2026-20805 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Detected |
Yes |
No |
No |
|
Printer Association Object |
CVE-2026-20808 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Kernel Memory |
CVE-2026-20809 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Ancillary Function Driver for WinSock |
CVE-2026-20810 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Win32K - ICOMP |
CVE-2026-20811 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows LDAP - Lightweight Directory Access
Protocol |
CVE-2026-20812 |
6.5 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
No |
No |
No |
|
Graphics Kernel |
CVE-2026-20814 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Capability Access Management Service (camsvc) |
CVE-2026-20815 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Installer |
CVE-2026-20816 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation More Likely |
Yes |
No |
No |
|
Windows Error Reporting |
CVE-2026-20817 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation More Likely |
Yes |
No |
No |
|
Windows Kernel |
CVE-2026-20818 |
6.2 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Virtualization-Based Security (VBS)
Enclave |
CVE-2026-20819 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Common Log File System Driver |
CVE-2026-20820 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation More Likely |
Yes |
No |
No |
|
Windows Remote Procedure Call |
CVE-2026-20821 |
6.2 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Microsoft Graphics Component |
CVE-2026-20822 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows File Explorer |
CVE-2026-20823 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Remote Assistance |
CVE-2026-20824 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Hyper-V |
CVE-2026-20825 |
4.4 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Tablet Windows User Interface (TWINUI) Subsystem |
CVE-2026-20826 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Tablet Windows User Interface (TWINUI) Subsystem |
CVE-2026-20827 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Internet Connection Sharing (ICS) |
CVE-2026-20828 |
4.6 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows TPM |
CVE-2026-20829 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Capability Access Management Service (camsvc) |
CVE-2026-20830 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Ancillary Function Driver for WinSock |
CVE-2026-20831 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Remote Procedure Call Interface
Definition Language (IDL) |
CVE-2026-20832 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Kerberos |
CVE-2026-20833 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Shell |
CVE-2026-20834 |
4.6 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
No |
No |
No |
|
Capability Access Management Service (camsvc) |
CVE-2026-20835 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Graphics Kernel |
CVE-2026-20836 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Media |
CVE-2026-20837 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Kernel |
CVE-2026-20838 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Client-Side Caching (CSC) Service |
CVE-2026-20839 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows NTFS |
CVE-2026-20840 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation More Likely |
Yes |
No |
No |
|
Windows DWM |
CVE-2026-20842 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2026-20843 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation More Likely |
Yes |
No |
No |
|
Windows Clipboard Server |
CVE-2026-20844 |
7.4 |
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Shell |
CVE-2026-20847 |
6.5 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
No |
No |
No |
|
Windows SMB Server |
CVE-2026-20848 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Kerberos |
CVE-2026-20849 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Capability Access Management Service (camsvc) |
CVE-2026-20851 |
6.2 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Hello |
CVE-2026-20852 |
7.7 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
No |
No |
No |
|
Windows WalletService |
CVE-2026-20853 |
7.4 |
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Local Security Authority Subsystem
Service (LSASS) |
CVE-2026-20854 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Server Update Service |
CVE-2026-20856 |
8.1 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Cloud Files Mini Filter Driver |
CVE-2026-20857 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20858 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:T/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Kernel-Mode Drivers |
CVE-2026-20859 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Ancillary Function Driver for WinSock |
CVE-2026-20860 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation More Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20861 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20862 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Win32K - ICOMP |
CVE-2026-20863 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Connected Devices Platform Service (Cdpsvc) |
CVE-2026-20864 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20865 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20866 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20867 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2026-20868 |
8.8 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Local Session Manager (LSM) |
CVE-2026-20869 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Win32K - ICOMP |
CVE-2026-20870 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Desktop Window Manager |
CVE-2026-20871 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation More Likely |
Yes |
No |
No |
|
Windows NTLM |
CVE-2026-20872 |
6.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20873 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20874 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Local Security Authority Subsystem
Service (LSASS) |
CVE-2026-20875 |
7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
No |
No |
No |
|
Windows Virtualization-Based Security (VBS)
Enclave |
CVE-2026-20876 |
6.7 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20877 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20918 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows SMB Server |
CVE-2026-20919 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Win32K - ICOMP |
CVE-2026-20920 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows SMB Server |
CVE-2026-20921 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows NTFS |
CVE-2026-20922 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation More Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20923 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Management Services |
CVE-2026-20924 |
7.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows NTLM |
CVE-2026-20925 |
6.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows SMB Server |
CVE-2026-20926 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows SMB Server |
CVE-2026-20927 |
5.3 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows HTTP.sys |
CVE-2026-20929 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Telephony Service |
CVE-2026-20931 |
8.0 |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows File Explorer |
CVE-2026-20932 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows SMB Server |
CVE-2026-20934 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Virtualization-Based Security (VBS)
Enclave |
CVE-2026-20935 |
6.2 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows NDIS |
CVE-2026-20936 |
4.3 |
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows File Explorer |
CVE-2026-20937 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Virtualization-Based Security (VBS)
Enclave |
CVE-2026-20938 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows File Explorer |
CVE-2026-20939 |
5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Windows Cloud Files Mini Filter Driver |
CVE-2026-20940 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Host Process for Windows Tasks |
CVE-2026-20941 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
Yes |
No |
|
Microsoft Office |
CVE-2026-20943 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office Word |
CVE-2026-20944 |
8.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office Excel |
CVE-2026-20946 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office SharePoint |
CVE-2026-20947 |
8.8 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Microsoft Office Word |
CVE-2026-20948 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office Excel |
CVE-2026-20949 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office Excel |
CVE-2026-20950 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office SharePoint |
CVE-2026-20951 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office |
CVE-2026-20952 |
8.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office |
CVE-2026-20953 |
8.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office Excel |
CVE-2026-20955 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office Excel |
CVE-2026-20956 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office Excel |
CVE-2026-20957 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office SharePoint |
CVE-2026-20958 |
5.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office SharePoint |
CVE-2026-20959 |
4.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Power Apps |
CVE-2026-20960 |
8.0 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Dynamic Root of Trust for Measurement (DRTM) |
CVE-2026-20962 |
4.4 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office SharePoint |
CVE-2026-20963 |
9.8 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Windows Admin Center |
CVE-2026-20965 |
7.5 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Inbox COM Objects |
CVE-2026-21219 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Capability Access Management Service (camsvc) |
CVE-2026-21221 |
7.0 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Unlikely |
Yes |
No |
No |
|
Microsoft Edge (Chromium-based) |
CVE-2026-21223 |
N/A |
N/A |
Exploitation Less Likely |
Yes |
No |
No |
|
Azure Connected Machine Agent |
CVE-2026-21224 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Azure Core shared client library for Python |
CVE-2026-21226 |
7.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Azure Logic Apps |
CVE-2026-21227 |
8.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C |
N/A |
Yes |
No |
No |
|
Microsoft Account |
CVE-2026-21264 |
9.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C |
N/A |
Yes |
No |
No |
|
Windows Secure Boot |
CVE-2026-21265 |
6.4 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Less Likely |
Yes |
No |
No |
|
Microsoft Office |
CVE-2026-21509 |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Exploitation Detected |
Yes |
No |
Yes |
|
Copilot Studio |
CVE-2026-21520 |
7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C/CR:H/IR:L/AR:L |
N/A |
Yes |
No |
No |
|
Copilot |
CVE-2026-21521 |
7.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C |
N/A |
Yes |
No |
No |
|
Azure Data Explorer |
CVE-2026-21524 |
7.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C |
N/A |
Yes |
No |
No |
|
Azure Resource Manager |
CVE-2026-24304 |
9.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C |
N/A |
Yes |
No |
No |
|
Azure Entra ID |
CVE-2026-24305 |
9.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C |
N/A |
Yes |
No |
No |
|
Azure Front Door (AFD) |
CVE-2026-24306 |
9.8 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
N/A |
Yes |
No |
No |
|
M365 Copilot |
CVE-2026-24307 |
9.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C |
N/A |
Yes |
No |
No |