MICROSOFT PATCH REPORTS  JUNUARY

REPORTY 2026  January  February  March  April  May  June  July  August  September  October  November  December


January 2026 Security Updates

This release consists of the following 124 Microsoft CVEs:

Tag

CVE

Base Score

CVSS Vector

Exploitability

FAQs?

Workarounds?

Mitigations?

Windows Deployment Services

CVE-2026-0386

7.5

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

SQL Server

CVE-2026-20803

7.2

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Hello

CVE-2026-20804

7.7

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

No

No

No

Desktop Window Manager

CVE-2026-20805

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Detected

Yes

No

No

Printer Association Object

CVE-2026-20808

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Kernel Memory

CVE-2026-20809

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Ancillary Function Driver for WinSock

CVE-2026-20810

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Win32K - ICOMP

CVE-2026-20811

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows LDAP - Lightweight Directory Access Protocol

CVE-2026-20812

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

No

No

No

Graphics Kernel

CVE-2026-20814

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Capability Access Management Service (camsvc)

CVE-2026-20815

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Installer

CVE-2026-20816

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation More Likely

Yes

No

No

Windows Error Reporting

CVE-2026-20817

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation More Likely

Yes

No

No

Windows Kernel

CVE-2026-20818

6.2

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Virtualization-Based Security (VBS) Enclave

CVE-2026-20819

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Common Log File System Driver

CVE-2026-20820

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation More Likely

Yes

No

No

Windows Remote Procedure Call

CVE-2026-20821

6.2

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Microsoft Graphics Component

CVE-2026-20822

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows File Explorer

CVE-2026-20823

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Remote Assistance

CVE-2026-20824

5.5

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Hyper-V

CVE-2026-20825

4.4

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Tablet Windows User Interface (TWINUI) Subsystem

CVE-2026-20826

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Tablet Windows User Interface (TWINUI) Subsystem

CVE-2026-20827

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Internet Connection Sharing (ICS)

CVE-2026-20828

4.6

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows TPM

CVE-2026-20829

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Capability Access Management Service (camsvc)

CVE-2026-20830

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Ancillary Function Driver for WinSock

CVE-2026-20831

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Remote Procedure Call Interface Definition Language (IDL)

CVE-2026-20832

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Kerberos

CVE-2026-20833

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Shell

CVE-2026-20834

4.6

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

No

No

No

Capability Access Management Service (camsvc)

CVE-2026-20835

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Graphics Kernel

CVE-2026-20836

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Media

CVE-2026-20837

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Kernel

CVE-2026-20838

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Client-Side Caching (CSC) Service

CVE-2026-20839

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows NTFS

CVE-2026-20840

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation More Likely

Yes

No

No

Windows DWM

CVE-2026-20842

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Routing and Remote Access Service (RRAS)

CVE-2026-20843

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation More Likely

Yes

No

No

Windows Clipboard Server

CVE-2026-20844

7.4

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Shell

CVE-2026-20847

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

No

No

No

Windows SMB Server

CVE-2026-20848

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Kerberos

CVE-2026-20849

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Capability Access Management Service (camsvc)

CVE-2026-20851

6.2

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Hello

CVE-2026-20852

7.7

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

No

No

No

Windows WalletService

CVE-2026-20853

7.4

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Local Security Authority Subsystem Service (LSASS)

CVE-2026-20854

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Server Update Service

CVE-2026-20856

8.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Cloud Files Mini Filter Driver

CVE-2026-20857

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Management Services

CVE-2026-20858

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:T/RC:C

Exploitation Less Likely

Yes

No

No

Windows Kernel-Mode Drivers

CVE-2026-20859

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Ancillary Function Driver for WinSock

CVE-2026-20860

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation More Likely

Yes

No

No

Windows Management Services

CVE-2026-20861

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Management Services

CVE-2026-20862

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Win32K - ICOMP

CVE-2026-20863

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Connected Devices Platform Service (Cdpsvc)

CVE-2026-20864

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Management Services

CVE-2026-20865

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Management Services

CVE-2026-20866

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Management Services

CVE-2026-20867

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Routing and Remote Access Service (RRAS)

CVE-2026-20868

8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Local Session Manager (LSM)

CVE-2026-20869

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Win32K - ICOMP

CVE-2026-20870

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Desktop Window Manager

CVE-2026-20871

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation More Likely

Yes

No

No

Windows NTLM

CVE-2026-20872

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Management Services

CVE-2026-20873

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Management Services

CVE-2026-20874

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Local Security Authority Subsystem Service (LSASS)

CVE-2026-20875

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

No

No

No

Windows Virtualization-Based Security (VBS) Enclave

CVE-2026-20876

6.7

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Management Services

CVE-2026-20877

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Management Services

CVE-2026-20918

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows SMB Server

CVE-2026-20919

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Win32K - ICOMP

CVE-2026-20920

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows SMB Server

CVE-2026-20921

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows NTFS

CVE-2026-20922

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation More Likely

Yes

No

No

Windows Management Services

CVE-2026-20923

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Management Services

CVE-2026-20924

7.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows NTLM

CVE-2026-20925

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows SMB Server

CVE-2026-20926

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows SMB Server

CVE-2026-20927

5.3

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows HTTP.sys

CVE-2026-20929

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Telephony Service

CVE-2026-20931

8.0

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows File Explorer

CVE-2026-20932

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows SMB Server

CVE-2026-20934

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Virtualization-Based Security (VBS) Enclave

CVE-2026-20935

6.2

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows NDIS

CVE-2026-20936

4.3

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows File Explorer

CVE-2026-20937

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Virtualization-Based Security (VBS) Enclave

CVE-2026-20938

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows File Explorer

CVE-2026-20939

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Windows Cloud Files Mini Filter Driver

CVE-2026-20940

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Host Process for Windows Tasks

CVE-2026-20941

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

Yes

No

Microsoft Office

CVE-2026-20943

7.0

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office Word

CVE-2026-20944

8.4

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office Excel

CVE-2026-20946

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office SharePoint

CVE-2026-20947

8.8

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Microsoft Office Word

CVE-2026-20948

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office Excel

CVE-2026-20949

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office Excel

CVE-2026-20950

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office SharePoint

CVE-2026-20951

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office

CVE-2026-20952

8.4

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office

CVE-2026-20953

8.4

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office Excel

CVE-2026-20955

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office Excel

CVE-2026-20956

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office Excel

CVE-2026-20957

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office SharePoint

CVE-2026-20958

5.4

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office SharePoint

CVE-2026-20959

4.6

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Power Apps

CVE-2026-20960

8.0

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Dynamic Root of Trust for Measurement (DRTM)

CVE-2026-20962

4.4

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office SharePoint

CVE-2026-20963

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Windows Admin Center

CVE-2026-20965

7.5

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Inbox COM Objects

CVE-2026-21219

7.0

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Capability Access Management Service (camsvc)

CVE-2026-21221

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Unlikely

Yes

No

No

Microsoft Edge (Chromium-based)

CVE-2026-21223

N/A

N/A

Exploitation Less Likely

Yes

No

No

Azure Connected Machine Agent

CVE-2026-21224

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Azure Core shared client library for Python

CVE-2026-21226

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Azure Logic Apps

CVE-2026-21227

8.2

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C

N/A

Yes

No

No

Microsoft Account

CVE-2026-21264

9.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

N/A

Yes

No

No

Windows Secure Boot

CVE-2026-21265

6.4

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Less Likely

Yes

No

No

Microsoft Office

CVE-2026-21509

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation Detected

Yes

No

Yes

Copilot Studio

CVE-2026-21520

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C/CR:H/IR:L/AR:L

N/A

Yes

No

No

Copilot

CVE-2026-21521

7.4

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

N/A

Yes

No

No

Azure Data Explorer

CVE-2026-21524

7.4

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C

N/A

Yes

No

No

Azure Resource Manager

CVE-2026-24304

9.9

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

N/A

Yes

No

No

Azure Entra ID

CVE-2026-24305

9.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C

N/A

Yes

No

No

Azure Front Door (AFD)

CVE-2026-24306

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

N/A

Yes

No

No

M365 Copilot

CVE-2026-24307

9.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

N/A

Yes

No

No

We are republishing 14 non-Microsoft CVEs:

CNA

Tag

CVE

FAQs?

Workarounds?

Mitigations?

MITRE Corporation

Agere Windows Modem Driver

CVE-2023-31096

Yes

No

No

MITRE Corporation

Windows Motorola Soft Modem Driver

CVE-2024-55414

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0628

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0899

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0900

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0901

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0902

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0903

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0904

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0905

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0906

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0907

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-0908

Yes

No

No

Chrome

Microsoft Edge (Chromium-based)

CVE-2026-1220

Yes

No

No

Security Update Guide Blog Posts

Date

Blog Post

October 31, 2025

You asked, we delivered: Introducing new features for an improved security experience

October 28, 2025

Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know

October 22, 2025

Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond

November 12, 2024

Toward greater transparency: Publishing machine-readable CSAF files

June 27, 2024

Toward greater transparency: Unveiling Cloud Service CVEs

April 9, 2024

Toward greater transparency: Security Update Guide now shares CWEs for CVEs

January 6, 2023

Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API

January 11, 2022

Coming Soon: New Security Update Guide Notification System

February 9, 2021

Continuing to Listen: Good News about the Security Update Guide API

January 13, 2021

Security Update Guide Supports CVEs Assigned by Industry Partners

December 8, 2020

Security Update Guide: Let’s keep the conversation going

November 9, 2020

Vulnerability Descriptions in the New Version of the Security Update Guide

Relevant Resources

  • The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.

  • Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see Windows Lifecycle Facts Sheet.

  • Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.

  • A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.

  • In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

  • Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

Known Issues

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).

KB Article

Applies To

5073379

Windows Server 2025

5073450

Windows Server 23H2

5073457

Windows Server 2022

5074109

Windows 11, version 24H2, Windows 11, version 25H2