IPWorX.com

Security Round-Up

Friday

2026-11-13
Your source for daily security alerts from some of the best experts in the world.
Find the problems, secure your systems now!
Get these alerts in your inbox every morning. Subscribe

CONTENTS

MSRC Unclassified ( 227 )
MS-ISAC Cybersecurity Advisory ( 8 )
TLDR InfoSec ( 2 )
Krebs On Security ( 2 )
Hacker News ( 48 )
Check Point Research ( 2 )
Cisco Talos ( 2 )
Bleeping Computer ( 15 )
CISA ( 5 )
Cisco Advisories ( 4 )
DataBreaches.net ( 10 )
Huntress Blog ( 3 )
Apple Security Research
Artificial truth
Shielder
CVEMon Intruder ( 10 )
Doyensec
Graham Cluley ( 3 )
PortSwigger Research
Hacking Lab
Schneier on Security ( 3 )
Securelist ( 5 )
Talos – Vulnerability Reports ( 4 )
Troy Hunt
WeLiveSecurity
Zero Day Initiative-Blog
Zero Day Initiative-Published ( 56 )
Microsoft-Threat Protection
Veeam

MSRC Unclassified

11/11 TOC Mariner – Ansible-core: user module generate_ssh_key follows a symlink…
11/11 TOC Mariner – CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo…
11/11 TOC Mariner – Gdb: gdb: stack buffer overflow in fetch_register_using_p vi…
11/11 TOC Mariner – Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdp…
11/11 TOC Mariner – Gdb: gdbserver: heap disclosure and wild pointer in gdb_pars…
11/11 TOC Mariner – Gdb: gdb: stack buffer overflow in parse_tsv_definition via …
11/11 TOC Mariner – Gdb: gdb: stack buffer overflow in parse_tracepoint_definiti…
11/11 TOC Mariner – Regexp2: Unbounded memory amplification via large `{m}` quan…
11/11 TOC Mariner – Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) wh…
11/11 TOC Mariner – WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI…
11/11 TOC Mariner – rustls before 0.23.46 Denial of Service via Brotli Certifica…
11/11 TOC Mariner – Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 S…
11/11 TOC Mariner – rustls before 0.23.46 Key Exchange Downgrade via Unauthentic…
11/11 TOC Mariner – Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption L…
11/11 TOC Mariner – Podman: containers-common: containers-common: default seccom…
11/11 TOC Mariner – Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS…
11/11 TOC Mariner – Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation By…
11/11 TOC Mariner – Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass vi…
11/11 TOC Mariner – Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body …
11/11 TOC Mariner – Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation By…
11/11 TOC Mariner – Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-…
11/11 TOC Mariner – Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion…
11/11 TOC Mariner – Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass …
11/11 TOC Mariner – Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass …
11/11 TOC Mariner – Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass …
11/11 TOC Mariner – undici vulnerable to cross-origin credential disclosure via …
11/11 TOC Mariner – undici vulnerable to cache poisoning and cross-user disclosu…
11/11 TOC Mariner – undici vulnerable to Subresource Integrity bypass via whites…
11/11 TOC Mariner – undici vulnerable to cross-user information disclosure via c…
11/11 TOC Mariner – undici vulnerable to Denial of Service via unhandled excepti…
11/11 TOC Mariner – undici vulnerable to cross-user cache disclosure via same-or…
11/11 TOC Mariner – Unbounded decoded HTTP/2 header-list size in cowlib cow_http…
11/11 TOC Mariner – gix-fs before 0.24.1 NTLM Credential Disclosure via Windows …
11/11 TOC Mariner – Gitoxide before 0.42.0 Denial of Service via Crafted Commit-…
11/12 TOC Mariner – Heap-based Buffer Overflow in Git CVE-2026-105437
11/12 TOC Mariner – xen-netback: Fix XenBus connection failure cleanup CVE-2026-…
11/12 TOC Mariner – xen-netback: Zero out sring pointers on unmap CVE-2026-99287…
11/12 TOC Mariner – inet: reject unhashed sockets during established lookups CVE…
11/12 TOC Mariner – imaplib STARTTLS serves plaintext bytes buffered before the …
11/12 TOC Mariner – Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during …
11/12 TOC Mariner – Nokogiri : Possible SSRF on JRuby when resolving external DT…
11/12 TOC Mariner – Nokogiri: Possible Use-After-Free when setting an attribute …
11/12 TOC Mariner – An issue was discovered in Inductive Automation Ignition bef…
11/12 TOC Mariner – An issue was discovered in Inductive Automation Ignition bef…
11/12 TOC Mariner – Spoofing issue in the Web Speech component CVE-2026-8963
11/12 TOC Mariner – Sblim-sfcb: sblim-sfcb: privileged file corruption and denia…
11/12 TOC Mariner – Sblim-cmpi-base: insecure temporary file creation in sblim-c…
11/12 TOC Mariner – Spoofing issue in the Popup Blocker component CVE-2026-8964
11/12 TOC Mariner – ImageMagick: Integer overflow in despeckle operation causes …
11/12 TOC Mariner – Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent sta…
11/12 TOC Mariner – Information disclosure in the DOM: Security component CVE-20…
11/12 TOC Mariner – Apache Tomcat: Jasper JSTL plug-in implementati…
11/12 TOC Mariner – netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpe…
11/12 TOC Mariner – Information disclosure in the IP Protection component CVE-20…
11/12 TOC Mariner – iommu/dma-iommu: Fix wrong scatterlist length assignment in …
11/12 TOC Mariner – Information disclosure in the Graphics: WebGPU component CVE…
11/12 TOC Mariner – Denial-of-service due to invalid pointer in the Audio/Video:…
11/12 TOC Mariner – Mitigation bypass in the DOM: Security component CVE-2026-89…
11/12 TOC Mariner – wifi: mac80211: bound S1G TIM PVB walk to the TIM element CV…
11/12 TOC Mariner – Privilege escalation in the Security component CVE-2026-8970…
11/12 TOC Mariner – Same-origin policy bypass in the Networking: JAR component C…
11/12 TOC Mariner – wifi: ath12k: fix inconsistent arvif state in vdev_create er…
11/12 TOC Mariner – Privilege escalation in the WebRTC: Audio/Video component CV…
11/12 TOC Mariner – Memory safety bugs fixed in Thunderbird 151 CVE-2026-8973
11/12 TOC Mariner – Memory safety bugs fixed in Thunderbird 140.11 and Thunderbi…
11/12 TOC Mariner – Memory safety bugs fixed in Thunderbird 140.11 and Thunderbi…
11/12 TOC Mariner – drm/amd/display: Fix divide-by-zero in calculate_mcache_sett…
11/12 TOC Mariner – C-blosc2 before 2.9.3 was discovered to contain a NULL point…
11/12 TOC Mariner – C-blosc2 before 2.9.3 was discovered to contain a NULL point…
11/12 TOC Mariner – Heap buffer overflow in the Audio/Video: Playback component …
11/12 TOC Mariner – C-blosc2 before 2.9.3 was discovered to contain a NULL point…
11/12 TOC Mariner – Same-origin policy bypass in the CSS Parsing and Computation…
11/12 TOC Mariner – C-blosc2 before 2.9.3 was discovered to contain a NULL point…
11/12 TOC Mariner – Memory safety bugs fixed in Firefox 148.0.2 CVE-2026-3847
11/12 TOC Mariner – Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() call…
11/12 TOC Mariner – Bluetooth: hci_sync: hold conn in hci_connect_big_sync() cal…
11/12 TOC Mariner – netfs: Fix folio_queue ENOMEM in writeback by adding a mempo…
11/12 TOC Mariner – nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush C…
11/12 TOC Mariner – nexthop: take nh->lock for f6i_list walks in replace check a…
11/12 TOC Mariner – KVM: arm64: vgic: Fix race between LPI release and re-regist…
11/12 TOC Mariner – accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_ins…
11/12 TOC Mariner – drm/amd/display: Fix DM I2C teardown race CVE-2026-93068
11/12 TOC Mariner – accel/amxdna: Fix page-insertion errors in amdxdna_insert_pa…
11/12 TOC Mariner – media: ipu6: Do not free aux device pdata after init CVE-202…
11/12 TOC Mariner – media: bcm2835-unicam: Fix asc leaked in error/remove path C…
11/12 TOC Mariner – cryptography has a buffer overflow if non-contiguous buffers…
11/12 TOC Mariner – ImageMagick: Heap buffer overflow (WRITE) in the YAML and JS…
11/12 TOC Mariner – cxl/features: Clamp Get Feature output size to the remaining…
11/12 TOC Mariner – eth: bnxt: avoid deadlock when canceling IRQ affinity notifi…
11/12 TOC Mariner – cxl/features: Reject Set Features output buffer smaller than…
11/12 TOC Mariner – cxl/features: Reject Get Feature count larger than the outpu…
11/12 TOC Mariner – ovpn: defer key slot crypto freeing to workqueue CVE-2026-74…
11/12 TOC Mariner – Arbitrary JavaScript execution in Reader View due to wrong H…
11/12 TOC Mariner – ImageMagick: Heap buffer overflow when encoding JXL image wi…
11/12 TOC Mariner – firmware: arm_scmi: Fix transport device teardown lookup CVE…
11/12 TOC Mariner – Site isolation issue in the Graphics: CanvasWebGL component …
11/12 TOC Mariner – ImageMagick: Off-by-One in MSL decoder could result in crash…
11/12 TOC Mariner – Privilege escalation in the DOM: Networking component CVE-20…
11/12 TOC Mariner – firmware: arm_scmi: Unwind P2A receiver mailbox setup failur…
11/12 TOC Mariner – Use-after-free in the JavaScript: WebAssembly component CVE-…
11/12 TOC Mariner – Use-after-free in the JavaScript: GC component CVE-2026-7493…
11/12 TOC Mariner – Mitigation bypass in the JavaScript: GC component CVE-2026-7…
11/12 TOC Mariner – Privilege escalation in the DOM: Navigation component CVE-20…
11/12 TOC Mariner – Use-after-free in the Graphics: Text component CVE-2026-7494…
11/12 TOC Mariner – Arbitrary JavaScript execution in internal pages via Reader …
11/12 TOC Mariner – Privilege escalation in the Graphics: CanvasWebGL component …
11/12 TOC Mariner – Privilege escalation in the Remote Settings Client component…
11/12 TOC Mariner – Use-after-free in the Graphics: ImageLib component CVE-2026-…
11/12 TOC Mariner – Use-after-free in the DOM: Core & HTML component CVE-2026-74…
11/12 TOC Mariner – Information disclosure in the Graphics: Text component CVE-2…
11/12 TOC Mariner – Information disclosure due to incorrect boundary conditions …
11/12 TOC Mariner – Privilege escalation due to invalid pointer in the Graphics …
11/12 TOC Mariner – Information disclosure in the Graphics component CVE-2026-74…
11/12 TOC Mariner – Use-after-free in the Graphics: Canvas2D component CVE-2026-…
11/12 TOC Mariner – Privilege escalation in the Downloads API component CVE-2026…
11/12 TOC Mariner – Privilege escalation in the Application Update component CVE…
11/12 TOC Mariner – Privilege escalation in the Networking: Cookies component CV…
11/12 TOC Mariner – Information disclosure due to side-channel in the Storage: C…
11/12 TOC Mariner – netfs: Fix subreq ref leak CVE-2026-98120
11/12 TOC Mariner – Privilege escalation in the Request Handling component CVE-2…
11/12 TOC Mariner – Same-origin policy bypass in the DOM: Service Workers compon…
11/12 TOC Mariner – Mitigation bypass in the Safe Browsing component CVE-2026-74…
11/12 TOC Mariner – Information disclosure in the WebRTC component CVE-2026-7495…
11/12 TOC Mariner – Mitigation bypass in the Storage: Cache API component CVE-20…
11/12 TOC Mariner – Site isolation issue in the WebExtensions component CVE-2026…
11/12 TOC Mariner – Side-channel in the Web Audio component CVE-2026-74961
11/12 TOC Mariner – Site isolation issue in the Networking: Cookies component CV…
11/12 TOC Mariner – Same-origin policy bypass in the Networking: Cookies compone…
11/12 TOC Mariner – Integer overflow in the Graphics component CVE-2026-74964
11/12 TOC Mariner – Privilege escalation in the Shell Integration component CVE-…
11/12 TOC Mariner – Information disclosure in the Form Autofill component CVE-20…
11/12 TOC Mariner – Same-origin policy bypass in the Audio/Video: Playback compo…
11/12 TOC Mariner – Site isolation issue in the Graphics: WebRender component CV…
11/12 TOC Mariner – Race condition, use-after-free in the Layout: Text and Fonts…
11/12 TOC Mariner – Site isolation issue in the Graphics component CVE-2026-7497…
11/12 TOC Mariner – Information disclosure in the DOM: UI Events & Focus Handlin…
11/12 TOC Mariner – Information disclosure in the DOM: Push Subscriptions compon…
11/12 TOC Mariner – Race condition, use-after-free in the Graphics component CVE…
11/12 TOC Mariner – Same-origin policy bypass in the Graphics: ImageLib componen…
11/12 TOC Mariner – JIT miscompilation in the JavaScript Engine: JIT component C…
11/12 TOC Mariner – Integer overflow in the Graphics component CVE-2026-74977
11/12 TOC Mariner – Clickjacking issue in the Widget component CVE-2026-74978
11/12 TOC Mariner – Rejected reason: This CVE ID has been rejected or withdrawn …
11/12 TOC Mariner – Rejected reason: This CVE ID has been rejected or withdrawn …
11/12 TOC Mariner – Rejected reason: This CVE ID has been rejected or withdrawn …
11/12 TOC Mariner – Rejected reason: This CVE ID has been rejected or withdrawn …
11/13 TOC Mariner – Double free after allocation failure in regcomp and regexec …
11/13 TOC Mariner – One-byte buffer overflow in wide scanf %s and %[ conversions…
11/13 TOC Mariner – Busybox: heap buffer overflow in wget ftp resume when the re…
11/13 TOC Mariner – Leak SMM RAM from the kernel (Simply TSA after an SMI) CVE-2…
11/13 TOC Mariner – Arbitrary code execution via crafted .syso files and cgo lin…
11/13 TOC Mariner – Flag sanitization bypass via “#cgo pkg-config:” directives i…
11/13 TOC Mariner – Unexpected code execution via escaped quotes in //go:cgo_ldf…
11/13 TOC Mariner – Unexpected code execution and arbitrary file write via Clang…
11/13 TOC Mariner – Arbitrary code execution during build on darwin via “-l to_l…
11/13 TOC Mariner – Arbitrary command execution via GCC spec files in cgo linker…
11/13 TOC Mariner – Unexpected code execution via –sysroot, -target, -isysroot,…
11/13 TOC Mariner – Linker script injection via split -Wl, flags and Darwin or s…
11/13 TOC Mariner – Cgo directive injection via .syso files disguised as Go obje…
11/13 TOC Mariner – Linker flag injection via cgo_import_dynamic and PE DLL name…
11/13 TOC Mariner – Host linker flag injection via //go:cgo_* directives in cmd/…
11/13 TOC Mariner – Apache Commons Codec: Blake3 doFinalize is stateless; the do…
11/13 TOC Mariner – Krb5: mit krb5 kadmind unauthenticated memory leak dos via a…
11/13 TOC Mariner – Krb5: mit krb5 kadmind unauthenticated memory exhaustion via…
11/13 TOC Mariner – Krb5: mit krb5 gss-rpc client memory leak on xid mismatch re…
11/13 TOC Mariner – Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn…
11/13 TOC Mariner – Krb5: mit krb5 kadmind unauthenticated memory leak dos via g…
11/13 TOC Mariner – Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssa…
11/13 TOC Mariner – Podman: untrusted image labels allow auto-update to restart …
11/13 TOC Mariner – Use after free in XML in Google Chrome prior to 157.0.8103.5…
11/13 TOC Mariner – Docker Engine overlay-network encryption rules are not resto…
11/13 TOC Mariner – Cluster-API proxy overwrites forwarded client identity with …
11/13 TOC Mariner – Forge: Ed25519 signature verification accepts small-order pu…
11/13 TOC Mariner – Forge: TLS client crash on a handshake record received witho…
11/13 TOC Mariner – Forge: TLS client crash on an unsupported ServerHello compre…
11/13 TOC Mariner – Forge: ReDoS in forge.http response header and cookie trimmi…
11/13 TOC Mariner – Forge: X.509 nameConstraints not enforced by verifyCertifica…
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121071: Incorrect …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121069: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121070: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121075: Missing au…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121073: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121072: Uninitiali…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121089: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121091: Incorrect …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121081: UI misrepr…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121068: Type confu…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121067: UI misrepr…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121175: Improper r…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121170: Improper r…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121168: Improper r…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121165: UI misrepr…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121172: Incorrect …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121171: Confused d…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121169: Missing au…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121164: Incorrect …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121077: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121076: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121167: Incorrect …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121166: Type confu…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121163: Improper i…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121082: Type confu…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121174: Missing au…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121079: Race condi…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121078: Type confu…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121178: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121176: Uninitiali…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121080: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121184: Out of bou…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121093: Out of bou…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121182: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121187: Observable…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121188: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121085: Incorrect …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121092: Uncontroll…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121189: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121087: Improper i…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121086: Buffer ove…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121084: Out of bou…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121088: Missing au…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121083: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121179: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121185: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121181: Use after …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121183: Incorrect …
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121190: UI misrepr…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
11/11 TOC Microsoft Edge (Chromium-based) – Chromium CVE-2026-121180: Buffer ove…
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

MS-ISAC Cybersecurity Advisory

11/10 TOC Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrar…

Multiple vulnerabilities have been discovered in Fortinet FortiOS, FortiManager, FortiAnalyzer, and other Fortinet products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could result in arbitrary code execution. Depending on the privileges associated with the account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Accounts configured to have fewer user rights on the system could be less impacted than those that operate with administrative user rights.

11/10 TOC Critical Patches Issued for Microsoft Products, November 10, 2026

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

11/10 TOC Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary…

Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow for arbitrary code execution.

 

  • Mozilla Firefox is a web browser used to access the Internet.
  • Mozilla Firefox ESR is a version of the web browser intended to be deployed in large organizations.

 

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

11/10 TOC Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary C…

Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could result in arbitrary code execution. Depending on the privileges associated with the account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Accounts configured to have fewer user rights on the system could be less impacted than those that operate with administrative user rights.

11/10 TOC Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary C…

Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

11/10 TOC Multiple Vulnerabilities in SAP Products Could Allow for Arbitrary Cod…

Multiple vulnerabilities have been discovered in SAP Products, the most severe of which could allow for arbitrary code execution. 


  • SAP NetWeaver is SAP’s technology platform and application server stack (ABAP and Java) that underpins many SAP business applications, including ERP and S/4HANA.
  • SAP Web Dispatcher is a software load balancer and reverse proxy that receives web requests from the internet and forwards them to SAP application servers.
  • SAP Gateway is the component that exposes SAP data and business logic through OData services and manages RFC communication between SAP systems and external applications.
  • SAP ABAP Developer Tools is an eclipse-based development environment for writing, testing, and debugging ABAP code in SAP systems.
  • S4CRM is the customer relationship management software for SAP S/4HANA, covering sales, service, and marketing processes.
  • SAP Cloud SDK is a set of developer libraries (for languages such as Python and JavaScript) that simplify building applications that connect to SAP cloud services and AI capabilities.


Successful exploitation of the most severe of these vulnerabilities could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.

11/10 TOC Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Co…

Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

11/10 TOC Multiple Vulnerabilities in SonicWall SonicOS Could Allow for Authenti…

Multiple vulnerabilities have been discovered in SonicWall SonicOS, the most severe of which could allow for Authentication Bypass. SonicOS is the operating system that powers SonicWall firewalls and network security appliances. Successful exploitation of the most severe of these vulnerabilities could allow a remote unauthenticated attacker to perform unauthorized operations, gain elevated privileges, access sensitive information, or impact the integrity of the affected device. An attacker who successfully exploits these vulnerabilities could potentially modify device configurations, access protected resources, bypass security controls, or disrupt normal operations. Organizations with internet-accessible management interfaces may face increased risk from the vulnerabilities affecting the SonicOS management interface.

TLDR InfoSec

11/11 TOC Xen Orchestra flaw , Grok Build leak , OpenAI kill switch
11/10 TOC Chrome zero-day patch , Barracuda ESG flaws , Google’s AlphaProof Code…

Krebs On Security

11/11 TOC Who Runs the Ransomware Group Qilin?
The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decade that all point to a 36-year-old man living in St. Petersburg, Russia.
11/10 TOC Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month’s Patch Tuesday addresses 63 critical flaws — including a zero-day in Microsoft Outlook — and comes amid important security updates from other software makers, including Adobe, Apple, Google and Mozilla.

Hacker News

11/13 TOC When an AI Agent Goes Wrong, Can You Stop It?
Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because its identity has access to the records and its connected tools allow the action. That kind of scenario raises a response question: what does “stop the agent” actually mean? A
11/13 TOC SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes an…
A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan. Enea, a telecom and cybersecurity software company based in Stockholm, found the group’s attack sources in at least six Asian countries and named it SilentAir this week. It assessed with high confidence that SilentAir is a state-level actor,
11/13 TOC Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers,…
An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain access to computers, steal passwords, and launch ransomware attacks. Police also seized about 6.4 million stolen logins belonging to more than 40,000 victims, according to Germany’s Federal Criminal Police Office (BKA). Gootloader is a loader:
11/13 TOC Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA…
An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege escalation flaw in Gaia OS  to deploy a backdoor called TSGA. The activity, detailed by Check Point, began on October 30, 2026, and targeted Israeli organizations, with a broader follow-up
11/12 TOC Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Run…
N-able on Thursday said it’s taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell. “We are restricting certain N-central features and integrations,” the company said in a Thursday update. “These measures may affect some functionality, but we believe taking additional precautions while remediation is completed is the
11/12 TOC Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to …
Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what can they access? A suspicious login might belong to an employee. An unusual API call could come from a machine account. Or an AI agent might be accessing sensitive systems using permissions nobody
11/12 TOC ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + …
A search result isn’t always safe. An access request isn’t always harmless. And a familiar account doesn’t always mean a familiar person is using it. Simple things to remember. Yet a surprising amount of this week’s trouble starts right there. Attackers are using fake websites, stolen access, and trusted tools to get into places they shouldn’t be. AI is helping them build attacks faster, while
11/12 TOC New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into…
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privileged process opens a prepared log, using path redirection to take control of
11/12 TOC Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Priva…
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the flaw, Red Hat said yesterday. The company has released fixed builds for eight Quay
11/12 TOC Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including …
Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below – CVE-2026-120868 (CVSS score: 9.3) – A memory overflow vulnerability in Packet
11/12 TOC 186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware,…
Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed TypoPrompting by Island. “AI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to verify,
11/12 TOC SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP …
The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a now-patched critical security flaw in the remote access software, and not a new vulnerability, it has emerged. Blackpoint Cyber’s Adversary Pursuit Group (APG), which shared the details with The Hacker News, said the recovered attacker toolkit exploits CVE-2026-84869 (CVSS score: 9.9), an
11/12 TOC Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Pr…
Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The company has already applied mitigations against attacks between VMs, and between VMs and the host. Inside a VM, the flaws may let an attacker with code on the same processor core infer data from other processes or the kernel. The affected
11/12 TOC New N-central Exploits Work Against Patched Servers, Enable Root RCE a…
N-able on Thursday said it’s investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running version 2026.4.1 HF2. “Based on our initial review, the server issue described depends on a non-default configuration in which the Legacy API is turned on and exposed to the public internet,” N-able said in a new advisory. “Legacy API is
11/12 TOC Calendar Invites and Live Proxies: Inside a Google Session Hijacking C…
Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to judge a link came back clean, and the operator designed it that way on purpose. The Threat Research team at Material Security spotted the campaign and has since taken down hundreds of attacker domains in an effort the team calls Operation CloudFire.
11/12 TOC PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remo…
PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution. The security flaw, tracked as CVE-2026-126325, carries a CVSS v4 score of 9.2 out of a maximum of 10.0. It has been described as a case of improper input validation and deserialization of untrusted data that could result in
11/12 TOC Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Ser…
A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if that server is later chosen to take over as the main server while it still lacks some recent changes. MongoDB, the company that makes the database, released fixed versions earlier this week. The affected servers are members of a replica
11/12 TOC Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and L…
A flaw fixed in Node.js this week lets unauthenticated clients crash servers that use the runtime’s built-in HTTP/2 support on the 24.x and 26.x release lines. A second HTTP/2 flaw can cause a server to send a client pieces of its memory, including responses intended for other connections. Fixed versions were released for all three supported lines: 22.23.5, 24.22.3, and 26.13.1. The crash
11/12 TOC Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Steale…
Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company. The stealer is built to take the secrets and cloud credentials that a repository’s CI workflows can reach. It ran in at least 1,806 repositories, where the attacker has likely collected
11/11 TOC Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execut…
A critical flaw in Apache HTTP Server’s HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the
11/11 TOC ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organiza…
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an advisory posted on its site, the company said there is no evidence that the incident involves a compromise of its infrastructure or a vulnerability in the ScreenConnect software. “Our initial assessment suggests the activity may involve
11/11 TOC Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privil…
Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems. The vulnerabilities are listed below – CVE-2026-108186 (CVSS score: 9.6) – An improper input validation vulnerability that could allow an unauthenticated user to conduct an escalation of privilege via
11/11 TOC AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Pro…
Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments. “In several recently observed intrusions, Alibaba Cloud systems hosting AntiFox interfaces were associated with confirmed malicious actions against
11/11 TOC Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ …
Threat actors have been observed targeting Qlik Sense servers to unsuccessfully deliver PowerShell reverse shell commands against multiple environments in October 2026. Cynet’s CyOps and Research teams said they identified the suspicious activity in October 2026 against several E.U.-based customers within a narrow window of just over three minutes. The activity has been found to share some
11/11 TOC Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential …
Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday. They included 24 apps built by staff at the social network X and at SpaceXSI, the company that makes the Grok AI assistant. Most of the open apps were games, landing pages, and calculators, but about 1 in 10 contained internal business or
11/11 TOC We Built An Agent That Broke All of Our Security Rules. Here’s What We…
We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s separate from any human’s. That was true for us at Token as well. Then, we built an agent that broke all three by default. This helped us think through how such agents should be defended. When a browser agent acts inside a user’s authenticated
11/11 TOC eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Co…
The in-house Python script behind eMudhra’s October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys. Each intermediate CA has its own private key, which the company uses to sign the certificates it issues. The 8 intermediate CAs compromised in October had a different problem: a single line in the script
11/11 TOC Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That Ma…
Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.
11/11 TOC Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unau…
AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday. It has promised to pay those charges itself when an AI provider will not refund them. The company builds and runs apps for its customers and stores their secrets, such as API keys and database
11/11 TOC Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewe…
An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, without retraining the model, Microsoft researchers have shown. When a chosen trigger appears, the model outputs an attacker’s command, which an agent using that model would run with the agent’s own permissions. The attacker must be able to change the model’s weights. The team tested the method on
11/11 TOC Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Availab…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Details of the vulnerabilities are below – CVE-2026-20320 (CVSS score: 7.5) – An improper restriction of XML external entity
11/10 TOC Git Patches Flaw That Lets Malicious Repositories Execute Code During …
A flaw in Git can let a malicious repository run an attacker’s code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw, tracked as CVE-2026-111760, is an integer truncation in how Git handles its index. An
11/10 TOC SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and Ab…
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI’s inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes requests inside a trusted execution environment (TEE
11/10 TOC Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin …
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062. “REST cookie parsing turns authenticationToken=j:%7B%7D into {},” Vates VMS said in an alert. “REST authentication passes that object to the
11/10 TOC Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware E…
Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications providers, government organizations, military entities, research institutions, and critical infrastructure across Latin America, Asia, and Europe over the past year. Check Point Research is tracking the clusters under the names SilentDelivery,
11/10 TOC Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Back…
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in early October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two
11/10 TOC Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Ac…
The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and administrative-themed phishing lures to deliver a remote access trojan (RAT) that shares its lineage with AsyncRAT and DCRat. “The campaign uses Portuguese and Spanish lures that resemble court notifications, fiscalía notices, tutela proceedings, and
11/10 TOC Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model …
Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month  uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and incomplete models for a “limited set of accounts.” In a notice published on October 10, 2026, the company said it detected unauthorized use of internal Fireworks
11/10 TOC Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Ke…
An iOS sandbox escape published on GitHub lets an app read other apps’ files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today. Apple’s updates for iOS 26 and 27, released yesterday, do not list a fix. A researcher who goes by forcequit,  in collaboration with 0xjohnny,
11/10 TOC Beyond the Alert: The Case for Rich Network Data
At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place. And, it’s why once we accept that prevention has its limits, we arrive at an interdiction strategy: finding and disrupting what got in. After the alert The alert tells you something happened. However, gaining
11/10 TOC Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing …
An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access messages sent before they joined. As of today, other updates released yesterday for the iPhone XS, XS Max and XR, the iPad (7th generation) and some Apple
11/10 TOC Russian Turla Hackers Use New Cereal Malware to Steal Emails From Gove…
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that’s used to break into victims’ Microsoft Exchange servers with an aim to surreptitiously collect emails. According to an ESET report shared with The Hacker News ahead of publication, the sophisticated and modular tool is designed for
11/10 TOC SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code E…
Four flaws that attackers could exploit without logging in were fixed today as part of SAP’s monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application server, the software SAP systems run on, and one is in the Web Dispatcher, which receives web requests from the internet and passes them on to that server. The flaws in the Web
11/10 TOC France Blames Iran for Sabotage Attack on Refrigeration Controllers at…
An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran’s Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday. The attackers broke into controllers on the night of October 11 and changed their defrost settings to high temperatures. That caused food losses and, in at least 15 cases, fires. The unit
11/10 TOC Anthropic’s Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberatt…
Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models (LLMs) helped its engineers “complete otherwise-infeasible software migrations, designed three working electronic devices from scratch, solved two open problems in the physics of black holes, made
11/10 TOC Google Issues Chrome Security Update for Eighth Actively Exploited Zer…
Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: 8.8), has been described as a use-after-free bug in the XML component. “Use-after-free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker
11/10 TOC N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zer…
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as Able2Shell. “As a precautionary measure, we are temporarily taking our Hosted N-central environment offline while we take the necessary actions to secure the
11/10 TOC CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, an…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below – CVE-2026-123218 (CVSS score: 9.8) – An incorrect authorization vulnerability

Check Point Research

11/12 TOC PHP2Shell Exploitation on Check Point Gateway

Key findings Introduction We have now confirmed that, in late October 2026, approximately one week after a security fix became available, activity originating from 130.94.19[.]204 targeted Israeli organizations through vulnerable Mobile Access portals on Check Point Security Gateways. Evidence suggested some cases of a successful compromise, with exploitation activity consistent with PHP2Shell, associated with CVE-2026-109618 […]

The post PHP2Shell Exploitation on Check Point Gateway appeared first on Check Point Research.

11/10 TOC Not All That Glitters Is Gold: Tracking CopperDragons Sparrow Framewor…

Key Points Introduction Over the past year, Check Point Research investigated a series of intrusion campaigns targeting several dozens of high-profile organizations across Latin America, Asia, and Europe. These campaigns initially appeared to be independent operations, each using different backdoors, post-exploitation tools and operational pace. However, we identified numerous connections between the tools and their […]

The post Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe appeared first on Check Point Research.

Cisco Talos

11/12 TOC Never be afraid to ask questions
Amy reflects on a formative college anthropology course that taught her the power of asking questions to bridge cultural gaps.
11/10 TOC Microsoft Patch Tuesday for November 2026 Snort rules and prominent v…
Microsoft has released its monthly security update for November 2026, which includes 1328 vulnerabilities affecting a range of products, including 60 that Microsoft marked as “critical.” Out of 60 “critical” vulnerabilities, 45 are remote code execution (RCE) vulnerabilities.

Bleeping Computer

11/13 TOC Check Point warns of zero-day flaw exploited for root access
Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish persistence on vulnerable devices since late October. […]
11/13 TOC Microsoft confirms Windows activation failures after November updates
Microsoft has confirmed that this month’s Patch Tuesday security updates are causing Windows activation and licensing failures with 0x80041008 error codes. […]
11/13 TOC Police arrest 354 suspects in dark web cybercrime crackdown
Authorities arrested 354 suspects in a joint international operation targeting vendors and buyers on the Archetyp, Nemesis, Tor2Door, Bohemia, and Kingdom dark web marketplaces. […]
11/12 TOC New worm-like ‘SCKit’ malware targets MSPs in ScreenConnect attacks
A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians’ computers and compromise additional managed networks. […]
11/12 TOC Hackers compromise 4,800 GitHub accounts to steal cloud credentials
A new campaign dubbed ‘wfx-loot’ has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. […]
11/12 TOC Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwid…
Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report connectivity problems worldwide. […]
11/12 TOC New N-able “4EverAble2Shell” zero-day exploited hours after PoC releas…
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed “4EverAble2Shell” to compromise servers and deploy cryptocurrency miners, with researchers reporting at least 21 affected systems, including 19 running the company’s latest security update. […]
11/12 TOC Apache HTTP Server patches critical HTTP/2 remote code execution flaw
A critical vulnerability in the HTTP/2 module of Apache HTTP Server could be exploited by an unauthenticated attacker to obtain remote code execution (RCE). […]
11/12 TOC New Windows SignDrop zero-day gives hackers SYSTEM privileges
Security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) has released a new Windows zero-day exploit that can let attackers gain SYSTEM privileges. […]
11/12 TOC Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware operations. […]
11/12 TOC Your Endpoint Management Platform Could Be Your Biggest Security Risk
Endpoint management platforms can become powerful attack tools when compromised, allowing hackers to deploy malware, execute commands, and disrupt thousands of devices. Action1 explains how customer-controlled cryptographic authorization can prevent attackers from abusing sensitive endpoint operations. […]
11/12 TOC Apify rotates API tokens, prompts 2FA resets after breach
Apify has rotated critical internal secrets and revoked some third-party OAuth connections after detecting unauthorized access to its internal systems. […]
11/12 TOC Microsoft: Recent Windows updates cause SQL Server performance issues
Microsoft has confirmed that Windows updates released since the October 2026 Patch Tuesday are causing SQL Server performance and stability issues. […]
11/12 TOC Microsoft confirms Windows security updates installation issues
Microsoft has confirmed reports that the November 2026 security updates are failing to install on Windows 11 systems with the October preview update. […]
11/12 TOC Hackers plant GSocket on Linux servers for persistent access
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access. […]

CISA

11/12 TOC Siemens Building Automation and Energy Products

View CSAF

Summary

On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as “php2shell” (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory covers the status of impact of various Siemens software products. As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens’ operational guidelines, and to follow the recommendations in the product manuals. Siemens is actively monitoring the situation and assessing the implications of these vulnerabilities on our portfolio. Because this evaluation is ongoing, our findings are subject to change as new technical details and vendor updates emerge. We will publish updated findings, guidance, and remediation recommendations as soon as they become available. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.

The following versions of Siemens Building Automation and Energy Products are affected:

  • AMIS TS vers:all/* (CVE-2026-109618, CVE-2026-109619)
  • blueplanet 360 NX3 M6 WM OD IISX vers:all/* (CVE-2026-109618, CVE-2026-109619)
  • blueplanet 360 NX3 M6 WM OD IISX – S vers:all/* (CVE-2026-109618, CVE-2026-109619)
  • Energy Engage V2.0SP9 vers:all/* (CVE-2026-109618, CVE-2026-109619)
  • Energy Engage V3.1SP1 vers:all/* (CVE-2026-109618, CVE-2026-109619)
  • Heliox Rapid vers:all/* ()Local Monitoring bt-monitoring-vm vers:intdot/<20261103 (CVE-2026-109618, CVE-2026-109619)
  • Spectrum Power 3 vers:all/* (CVE-2026-109619)
  • Spectrum Power 4 vers:all/*, vers:all/*, vers:all/* (CVE-2026-109618, CVE-2026-109619, CVE-2026-109618, CVE-2026-109619, CVE-2026-109618, CVE-2026-109619)
  • Spectrum Power 7 vers:all/* (CVE-2026-109618, CVE-2026-109619)
  • Spectrum Power TG vers:all/* (CVE-2026-109618, CVE-2026-109619)
CVSS Vendor Equipment
v3 9.8 Siemens AMIS TS
1 Vulnerability
Use After Free

Background

  • Critical Infrastructure Sectors: Energy
  • Countries/Areas Deployed: Worldwide
  • Company Headquarters Location: Germany

Vulnerabilities

Expand All +
CVE-2026-109618
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
Read More

11 Affected Products

AMIS TS

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

blueplanet 360 NX3 M6 WM OD IISX

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Energy Engage V2.0SP9

Product Status: known_affected, known_not_affected

Remediations

No fix planned
Currently no fix is planned

Energy Engage V3.1SP1

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Upgrade PHP version to V8.1.34 release 6

blueplanet 360 NX3 M6 WM OD IISX – S

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Local Monitoring bt-monitoring-vm < V20261103

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Update to V20261103 or later version

Spectrum Power 4 using Nagios or Zabbix

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 4 with Web Office Portal V3.0, V3.1 and V3.2

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 4 with HISViews V1.0

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 7 using IHM (NagiosXI)

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Red Hat released a PHP security patch for RHEL 8 and 9

Spectrum Power TG which are based on Microsoft Windows using the WebConsole and WebQuery components

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Upgrade PHP version to V8.5.12

Additional Metrics

Relevant CWE: CWE-416 Use After Free

CVSS Version Base Score Base Severity Vector String
3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View CVE Details

CVE-2026-109619
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
Read More

23 Affected Products

AMIS TS

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

blueplanet 360 NX3 M6 WM OD IISX

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Energy Engage V2.0SP9

Product Status: known_affected, known_not_affected

Remediations

No fix planned
Currently no fix is planned

Energy Engage V3.1SP1

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Upgrade PHP version to V8.1.34 release 6

blueplanet 360 NX3 M6 WM OD IISX – S

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Local Monitoring bt-monitoring-vm < V20261103

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Update to V20261103 or later version

Spectrum Power 4 using Nagios or Zabbix

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 4 with Web Office Portal V3.0, V3.1 and V3.2

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 4 with HISViews V1.0

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 7 using IHM (NagiosXI)

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Red Hat released a PHP security patch for RHEL 8 and 9

Spectrum Power TG which are based on Microsoft Windows using the WebConsole and WebQuery components

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Upgrade PHP version to V8.5.12

AMIS TS

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

blueplanet 360 NX3 M6 WM OD IISX

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Energy Engage V2.0SP9

Product Status: known_affected, known_not_affected

Remediations

No fix planned
Currently no fix is planned

Energy Engage V3.1SP1

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Upgrade PHP version to V8.1.34 release 6

blueplanet 360 NX3 M6 WM OD IISX – S

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Local Monitoring bt-monitoring-vm < V20261103

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Update to V20261103 or later version

Spectrum Power 3 using IHM (NagiosXI) running on Red Hat Enterprise Linux version (RHEL) 7

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Red Hat released a PHP security patch for RHEL 7

Spectrum Power 4 using Nagios or Zabbix

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 4 with Web Office Portal V3.0, V3.1 and V3.2

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 4 with HISViews V1.0

Product Status: known_affected, known_not_affected

Remediations

None available
Currently no fix is available

Spectrum Power 7 using IHM (NagiosXI)

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Red Hat released a PHP security patch for RHEL 8 and 9

Spectrum Power TG which are based on Microsoft Windows using the WebConsole and WebQuery components

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Upgrade PHP version to V8.5.12

Additional Metrics

Relevant CWE: CWE-416 Use After Free

CVSS Version Base Score Base Severity Vector String
3.1 8.1 HIGH CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

View CVE Details

Acknowledgments

  • Siemens ProductCERT reported these vulnerabilities to CISA.

General Recommendations

Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid’s reliability can thus be minimized by virtue of the grid design. Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. As a general security measure Siemens strongly recommends protecting network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines can be found at: https://www.siemens.com/gridsecurity

Additional Resources

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

  • Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
  • Locate control system networks and remote devices behind firewalls and isolating them from business networks.
  • When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B–Targeted Cyber Intrusion Detection and Mitigation Strategies.

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Advisory Conversion Disclaimer

This ICSA is a verbatim republication of Siemens ProductCERT SSA-166980 from a direct conversion of the vendor’s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA’s website as a means of increasing visibility and is provided “as-is” for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.

Revision History

  • Initial Release Date: 2026-10-26
Date Revision Summary
2026-10-26 1 Publication Date
2026-10-27 2 Updated the Known not affected list
2026-10-29 3 Added AMIS TS, Energy Engage V2.0SP9, Energy Engage V3.1SP1, Spectrum Power 3, Spectrum Power 4, Spectrum Power 7 and Spectrum Power TG to Affected Products and updated the list of known not affected
2026-11-05 4 Updated Known Not Affected and Known Affected Products list
2026-11-12 5 Initial CISA Republication of Siemens ProductCERT SSA-166980 advisory

Legal Notice and Terms of Use

11/12 TOC Siemens RUGGEDCOM APE1808

View CSAF

Summary

Palo Alto Networks has published information on a vulnerability in PAN-OS related to the Node2Shell vulnerability. This advisory lists the related Siemens Industrial products affected by this vulnerability. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks’ upstream security notifications. 

The following versions of Siemens RUGGEDCOM APE1808 are affected:

  • RUGGEDCOM APE1808 vers:all/* (CVE-2026-111497)
CVSS Vendor Equipment
v3 9.8 Siemens RUGGEDCOM APE1808
1 Vulnerability
Out-of-bounds Write

Background

  • Critical Infrastructure Sectors: Critical Manufacturing
  • Countries/Areas Deployed: Worldwide
  • Company Headquarters Location: Germany

Vulnerabilities

CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Read More

1 Affected Product

RUGGEDCOM APE1808 with Palo Alto Networks PAN-OS

Product Status: known_affected

Remediations

Vendor fix
Upgrade to corresponding available PAN-OS version. Contact customer support to receive additional patch and update information.

Additional Metrics

Relevant CWE: CWE-787 Out-of-bounds Write

CVSS Version Base Score Base Severity Vector String
3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View CVE Details

Acknowledgments

  • Siemens ProductCERT reported this vulnerability to CISA.

General Recommendations

As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens’ operational guidelines for Industrial Security (https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Additional Resources

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

  • Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
  • Locate control system networks and remote devices behind firewalls and isolating them from business networks.
  • When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B–Targeted Cyber Intrusion Detection and Mitigation Strategies.

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Advisory Conversion Disclaimer

This ICSA is a verbatim republication of Siemens ProductCERT SSA-898633 from a direct conversion of the vendor’s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA’s website as a means of increasing visibility and is provided “as-is” for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.

Revision History

  • Initial Release Date: 2026-10-30
Date Revision Summary
2026-10-30 1 Publication Date
2026-11-12 2 Initial CISA Republication of Siemens ProductCERT SSA-898633 advisory

Legal Notice and Terms of Use

11/12 TOC Siemens Industrial Edge Management

View CSAF

Summary

Siemens is currently assessing the impact of Node2Shell (CVE-2026-111497) on Industrial Edge. Please check your Industrial Edge Management (IEM) setup: – No Management Applications installed: No action is required. Although the affected Brotli library is included in the IEM software stack, the affected functionality is not used or exposed. The same applies to IEDK. – Management Applications installed: Follow the specific mitigations until a fix is available. – Device Applications installed: Follow the specific mitigations until a fix is available. For Siemens-managed services, Industrial Edge Hub and Industrial Edge Management Cloud, appropriate Firewall/WAF protection has already been implemented. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.

The following versions of Siemens Industrial Edge Management are affected:

  • Cloud Connector Configurator vers:intdot/<1.24.3 (CVE-2026-111497)
  • Common Configurator (CC on IEM) vers:all/* (CVE-2026-111497)
  • Common Configurator on Device (CC on Edge) vers:all/* (CVE-2026-111497)
  • Data Flow Monitoring vers:intdot/<3.0.18 (CVE-2026-111497)
  • Databus Configurator vers:intdot/<4.0.1 (CVE-2026-111497)
  • DataXess Configurator vers:intdot/<1.5.7 (CVE-2026-111497)
  • Edge OPC UA Server Configurator vers:intdot/<2.3.10 (CVE-2026-111497)
  • Flow Creator Configurator vers:intdot/<1.15.1 (CVE-2026-111497)
  • Industrial Edge Hub vers:all/* (CVE-2026-111497)
  • Industrial Edge Management Cloud vers:all/* (CVE-2026-111497)
CVSS Vendor Equipment
v3 9.8 Siemens Cloud Connector Configurator
1 Vulnerability
Out-of-bounds Write

Background

  • Critical Infrastructure Sectors: Critical Manufacturing
  • Countries/Areas Deployed: Worldwide
  • Company Headquarters Location: Germany

Vulnerabilities

CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Read More

10 Affected Products

Cloud Connector Configurator < V1.24.3

Product Status: known_affected

Remediations

Vendor fix
Update to V1.24.3 or later version

Industrial Edge Management Cloud

Product Status: known_affected

Remediations

Vendor fix
Vulnerability fixed on central cloud service starting 2026-10-28; no user actions necessary

Common Configurator (CC on IEM)

Product Status: known_affected

Remediations

Mitigation
Uninstall all Management Applications and protect your IEM instance with a Firewall/WAF until a fix is available

None available
Currently no fix is available

Common Configurator on Device (CC on Edge)

Product Status: known_affected

Remediations

Mitigation
Stop Common Configurator on Device (CC on Edge) until a fix is available

None available
Currently no fix is available

Data Flow Monitoring < V3.0.18

Product Status: known_affected

Remediations

Vendor fix
Update to V3.0.18 or later version

Databus Configurator < V4.0.1

Product Status: known_affected

Remediations

Vendor fix
Update to V4.0.1 or later version

DataXess Configurator < V1.5.7

Product Status: known_affected

Remediations

Vendor fix
Update to V1.5.7 or later version

Edge OPC UA Server Configurator < V2.3.10

Product Status: known_affected

Remediations

Vendor fix
Update to V2.3.10 or later version

Flow Creator Configurator < V1.15.1

Product Status: known_affected

Remediations

Vendor fix
Update to V1.15.1 or later version

Industrial Edge Hub

Product Status: known_affected

Remediations

Vendor fix
Vulnerability fixed on central cloud service starting 2026-10-29; no user actions necessary

Additional Metrics

Relevant CWE: CWE-787 Out-of-bounds Write

CVSS Version Base Score Base Severity Vector String
3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View CVE Details

Acknowledgments

  • Siemens ProductCERT reported this vulnerability to CISA.

General Recommendations

As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens’ operational guidelines for Industrial Security (https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Additional Resources

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

  • Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
  • Locate control system networks and remote devices behind firewalls and isolating them from business networks.
  • When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B–Targeted Cyber Intrusion Detection and Mitigation Strategies.

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Advisory Conversion Disclaimer

This ICSA is a verbatim republication of Siemens ProductCERT SSA-443410 from a direct conversion of the vendor’s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA’s website as a means of increasing visibility and is provided “as-is” for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.

Revision History

  • Initial Release Date: 2026-10-30
Date Revision Summary
2026-10-30 1 Publication Date
2026-11-06 2 Added fix for Cloud Connector Configurator, Data Flow Monitoring, Databus Configurator, Edge OPC UA Server Configurator and Flow Creator Configurator; Added DataXess Configurator as affected product
2026-11-12 3 Initial CISA Republication of Siemens ProductCERT SSA-443410 advisory

Legal Notice and Terms of Use

11/12 TOC Siemens RUGGEDCOM APE1808

View CSAF

Summary

Palo Alto Networks has published information on vulnerabilities in PAN-OS related to PHP2Shell vulnerabilities. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks’ upstream security notifications. 

The following versions of Siemens RUGGEDCOM APE1808 are affected:

  • RUGGEDCOM APE1808 vers:all/* (CVE-2026-109618, CVE-2026-109619)
CVSS Vendor Equipment
v3 9.8 Siemens RUGGEDCOM APE1808
1 Vulnerability
Use After Free

Background

  • Critical Infrastructure Sectors: Critical Manufacturing
  • Countries/Areas Deployed: Worldwide
  • Company Headquarters Location: Germany

Vulnerabilities

Expand All +
CVE-2026-109618
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
Read More

1 Affected Product

RUGGEDCOM APE1808 with Palo Alto Networks PAN-OS (10.2 All, 11.1 All, 11.2 All, 12.1 All, 12.2 All)

Product Status: known_affected

Remediations

Vendor fix
Upgrade to corresponding available PAN-OS version. Contact customer support to receive additional patch and update information.

Additional Metrics

Relevant CWE: CWE-416 Use After Free

CVSS Version Base Score Base Severity Vector String
3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View CVE Details

CVE-2026-109619
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
Read More

2 Affected Products

RUGGEDCOM APE1808 with Palo Alto Networks PAN-OS (10.2 All, 11.1 All, 11.2 All, 12.1 All, 12.2 All)

Product Status: known_affected

Remediations

Vendor fix
Upgrade to corresponding available PAN-OS version. Contact customer support to receive additional patch and update information.

RUGGEDCOM APE1808 with Palo Alto Networks PAN-OS (10.2 All, 11.1 All, 11.2 All, 12.1 All, 12.2 All)

Product Status: known_affected

Remediations

Vendor fix
Upgrade to corresponding available PAN-OS version. Contact customer support to receive additional patch and update information.

Additional Metrics

Relevant CWE: CWE-416 Use After Free

CVSS Version Base Score Base Severity Vector String
3.1 8.1 HIGH CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

View CVE Details

Acknowledgments

  • Siemens ProductCERT reported these vulnerabilities to CISA.

General Recommendations

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens’ operational guidelines for Industrial Security (https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Additional Resources

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

  • Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
  • Locate control system networks and remote devices behind firewalls and isolating them from business networks.
  • When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B–Targeted Cyber Intrusion Detection and Mitigation Strategies.

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Advisory Conversion Disclaimer

This ICSA is a verbatim republication of Siemens ProductCERT SSA-566512 from a direct conversion of the vendor’s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA’s website as a means of increasing visibility and is provided “as-is” for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.

Revision History

  • Initial Release Date: 2026-10-23
Date Revision Summary
2026-10-23 1 Publication Date
2026-10-28 2 Updated Remediation to include PAN-OS
2026-11-04 3 Adjusted history entry of V1.1
2026-11-12 4 Initial CISA Republication of Siemens ProductCERT SSA-566512 advisory

Legal Notice and Terms of Use

11/12 TOC Siemens Desigo, Gridscale

View CSAF

Summary

On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as “Node2Shell” (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens software products. Siemens has released new versions for the affected products and recommends to update to the latest versions.

The following versions of Siemens Desigo, Gridscale are affected:

  • Desigo CC family V8 vers:all/* (CVE-2026-111497)
  • Desigo CC family V9 vers:all/* (CVE-2026-111497)
  • Gridscale X DSA vers:intdot/>=5.3|<5.4 (CVE-2026-111497)

  • Gridscale X PSS®E vers:intdot/<36.8.0 (CVE-2026-111497)

     

CVSS Vendor Equipment
v3 9.8 Siemens Desigo CC family V8
1 Vulnerability
Out-of-bounds Write

Background

  • Critical Infrastructure Sectors: Critical Manufacturing, Energy, Information Technology
  • Countries/Areas Deployed: Worldwide
  • Company Headquarters Location: Germany

Vulnerabilities

CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Read More

4 Affected Products

Desigo CC family V8

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Install the latest .NET security updates via Windows Update.

Desigo CC family V9

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Install the latest .NET security updates via Windows Update.

Gridscale X DSA >= V5.3 < V5.4

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Update to V5.4 or later version

Gridscale X PSS®E < V36.8.0

Product Status: known_affected, known_not_affected

Remediations

Vendor fix
Update to V36.8.0 or later version

Additional Metrics

Relevant CWE: CWE-787 Out-of-bounds Write

CVSS Version Base Score Base Severity Vector String
3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View CVE Details

Acknowledgments

  • Siemens ProductCERT reported this vulnerability to CISA.

General Recommendations

Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid’s reliability can thus be minimized by virtue of the grid design. Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines can be found at: https://www.siemens.com/gridsecurity

Additional Resources

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

  • Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
  • Locate control system networks and remote devices behind firewalls and isolating them from business networks.
  • When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B–Targeted Cyber Intrusion Detection and Mitigation Strategies.

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Advisory Conversion Disclaimer

This ICSA is a verbatim republication of Siemens ProductCERT SSA-045512 from a direct conversion of the vendor’s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA’s website as a means of increasing visibility and is provided “as-is” for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.

Revision History

  • Initial Release Date: 2026-10-30
Date Revision Summary
2026-10-30 1 Publication Date
2026-11-04 2 Added Desigo CC to the affected products list.
2026-11-06 3 Added Gridscale X DSA and PSSE to the list of affected products
2026-11-12 4 Initial CISA Republication of Siemens ProductCERT SSA-045512 advisory

Legal Notice and Terms of Use

Cisco Advisories

11/12 TOC Cisco Informational for Emergency Distrust of eMudhra Root and Interme…

Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered.

A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys within seconds. For more information, see eMudhra Intermediate CA Compromise and the Cisco Talos blog post Compromised eMudhra intermediate certificates.

For information about Splunk products and offerings, see Compromised eMudhra Intermediate Certificate Authorities on Splunk Products – October 2026.

Important: If a product is not listed within this advisory, Cisco’s review indicates that the product is not affected by this vulnerability.

This advisory will be updated as additional information becomes available. 

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-emudhra-info-ScS22A1r


Security Impact Rating: Informational
11/12 TOC Vulnerabilities in Node.js and Brotli Affecting Cisco Products: Octobe…

On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. 

These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release. 

The following vulnerabilities have a Security Impact Rating (SIR) of High and are addressed in this advisory:

  • CVE-2026-111497 – Brotli decoder out-of-bounds write; potential remote code execution
  • CVE-2026-105482 – DNS resolution truncation involving embedded NUL characters
  • CVE-2026-105483 – TLS hostname validation bypass using fullwidth IP digits
  • CVE-2026-106069 – TLS hostname validation bypass with noncanonical IP addresses

For information about Splunk products and offerings, see Vulnerabilities in Node.js (CVE-2026-111497, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069) on Splunk Products – October 2026

This investigation was expanded to cover Brotli outside of Node.js on October 30, 2026. The Brotli decoder flaw (CVE-2026-111497), which is in the Google Brotli C decoder, is often bundled with or linked to other software, so products beyond Node.js may be affected. For software that may be affected, see Broccoli2Shell.

Important: If a product is not listed within this advisory, Cisco’s review indicates that the product is not affected by this vulnerability.

This advisory will be updated as additional information becomes available.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u


Security Impact Rating: High
CVE: CVE-2026-105482,CVE-2026-105483,CVE-2026-106069,CVE-2026-111497
11/12 TOC Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulne…

A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. 

This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a crafted XML message to the Open Client Interface – Provisioning (OCI-P) service. A successful exploit could allow the attacker to view sensitive files from the filesystem with the privileges of the Cisco BroadWorks user.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt


Security Impact Rating: High
CVE: CVE-2026-20320
11/10 TOC Cisco Identity Services Engine Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device.

These vulnerabilities are due to the lack of server-side validation of Administrator permissions. An attacker could exploit these vulnerabilities by submitting a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify descriptions of files on specific pages. To exploit these vulnerabilities, an attacker would need valid Administrator credentials.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-auth-bypass-1-MxcTNgwx

This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories. In addition, for further documentation of improvements and fixes in Cisco Identity Services Engine, see Cisco Identity Services Engine Security Hardening Release: September 2026.


Security Impact Rating: Medium
CVE: CVE-2026-20183,CVE-2026-20285,CVE-2026-20286

DataBreaches.net

11/12 TOC TSMC has reportedly leaked the personal data of 46,000 employees, but …
The following is an automated Google translation of an article that originally appeared in Chinese. Jian Yongxiang reports: TSMC, the world’s leading semiconductor foundry, has been hit by a major cybersecurity incident. Hackers were openly selling personal data, allegedly belonging to TSMC employees, on an underground forum. They claimed to possess 46,000 records, totaling 6.9GB of…
11/12 TOC Resource: DysruptionHubs Cyber Incident Registry completes its histori…
More than 600 researched profiles now connect past coverage with ongoing follow-up, alongside new ways for Sustainers to follow the reporting. Joseph Topping reports: DysruptionHub’s Cyber Incident Registry now contains more than 600 researched profiles, all free to read, following the completed backfill of more than two years of past coverage. When I introduced the…
11/12 TOC Ransomware Without Data Theft Can Still Trigger Mandatory Breach Repor…
CXO Today reports: A ransomware attack that locks up corporate systems can legally qualify as a reportable personal data breach in India—even if hackers never steal a single file. According to a media background briefing released by K7 CyberSecurity on November 12, 2026, India’s Digital Personal Data Protection (DPDP) Act defines a personal data breach…
11/12 TOC Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Sergiu Gatlan reports: Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware operations. Gootloader is a malware loader active since 2020, StealC is an infostealer that helps exfiltrate credentials, cryptocurrency wallets, and other sensitive information from victims’ devices, and CastleRAT is…
11/12 TOC Hong Kong Sogo data breach puts personal information of 820,000 member…
Danny Mok reports: Major Hong Kong retailers Sogo and Chow Sang Sang have disclosed separate data breaches after unauthorised parties accessed their systems, potentially exposing the personal information of customers, including that of up to 820,000 Sogo loyalty members. The Office of the Privacy Commissioner for Personal Data disclosed the Sogo figures on Thursday, hours…
11/12 TOC Unocoin Goes Dark As 81,000 Wallets Show Zero Holdings
Damilola Esebame reports: Indian cryptocurrency exchange Unocoin said it discovered unauthorized access to its servers on 9 November and temporarily disabled user logins while its security team investigated. In its public notice, the exchange said its team was investigating the incident and working on remediation. Three days later, the exchange’s website remained offline. By 12…
11/12 TOC Study Provides Insights into Impact of Cyberattacks on Hospital Care
Steve Alder reports: A recent analysis by The Health Management Academy of cyberattacks on U.S. hospitals provides insights into the extent to which patient care is being disrupted by cyberattacks. A growing body of research shows an increase in medical complications and poorer patient outcomes following cyberattacks, and multiple studies suggest increases in mortality rates…
11/12 TOC Active ScreenConnect attacks breach MSPs, impact dozens of organizatio…
Lawrence Abrams reports: ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices. As part of its investigation, ConnectWise has disabled five third-party ScreenConnect extensions across approximately 400 partner environments as a precaution, warning that they may be associated with…
11/12 TOC Inside an AI Attack Against a US Retailer
Alexander Culafi reports: A threat actor deployed an AI model during a stalled cyberattack and rescued the campaign, achieving lateral movement in the process. The attack, detailed today by Symantec, targeted an unnamed US retail organization in September. The threat actor’s hand-typed commands were repeatedly blocked, so the attacker switched to what appeared to be…
11/12 TOC Who Runs the Ransomware Group Qilin?
Brian Krebs reports: The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decade that all…

Huntress Blog

11/12 TOC Crafty Microsoft Teams Booking Flow Disguises Device Code Phishing
Threat actors used a convincing Microsoft Teams meeting-booking lure to conceal device code phishing and trick victims into authorizing attacker access.
11/11 TOC SCKit Worm Installs Rogue ScreenConnect Clients and Session Cookie Rel…
Attackers are using cloud-hosted ScreenConnect panels to install rogue clients on hundreds of managed endpoints.
11/10 TOC Beyond the clipboard: The evolving tradecraft of ClickFix
ClickFix techniques are evolving. Huntress breaks down four attack chains: lateral movement, hidden PNG payloads, Node.js RATs and cache seeing.

Apple Security Research

11/11 TOC Secure Exclaves and Ambient Sensing

Artificial truth

11/10 TOC Weird licenses and the new open source

Somewhere on an IRC channel, I ended up in a conversation about the The Filthy Human Hands (FHH) License. It wasn’t the first time weird licenses were discussed there: Reticulum‘s sparked some interesting discussions as well.

Let’s start from the beginning.

If you don’t want to read the Wikipedia article on Free Software, a couple of years ago, I gave a small presentation at school as part of the “Oral communication in English” course, which is a (shoddy) cake-based explanation of the topic. Long story short, a Free Software is a software with 4 freedoms:

  1. The freedom to run the program as you wish, for any purpose.
  2. The freedom to study how the program works, and change it to make it do what you wish. Access to the source code is a precondition for this.
  3. The freedom to redistribute copies so you can help others.
  4. The freedom to distribute copies of your modified versions to others. By doing this you can give the whole community a chance to benefit from your changes.

There is also the term Open Source, which is more or less Free Software but without the sociopolitical aspect of it, which is like a pizza without olives, or art without context: something devoid of meaning, a business-oriented product instead of a creation. Like in every sociopolitical endeavour, people sometimes disagree, leading to subtle but important variations. One of the most important one in the Free Software movement has been the question of the copyleft: should derivatives of Free Software be licensed under the same license? Some licenses, like the GPL says yes and this includes everything built on top of GPL code, the LGPL says that only code under LGPL needs to be released as LGPL, and others, called permissive licenses, like the BSD and MIT don’t impose such restrictions.

The Free Software movement started in 1986, so we’re around 40 years later now, and the picture is pretty bleak: technically, one could argue that it won, as every computer-using company in the world depends on Free Software one way or the other: Firefox, Linux, VLC, Chrome, Ubuntu, Apache, nginx, Wikipedia, Open Street Map, Open Food Facts, … as well as more fundamental software components like curl, libxml, busybox, OpenSSL, GCC, clang, …

Yet virtually none of them do contribute back to those commons, some of them being thanklessly maintained by a random person in Nebraska. Worse, a handful of computer-related companies (“cloud providers”) are making ungodly amount of money renting infrastructure running Free Software, most smart™ devices are running Free Software, every single software producing/selling company depends on Free Software, and again, almost none contribute back meaningfully. A small number are trying to sponsor some projects they’re depending on, but it often feels like a crass move for software that are maintained as a hobby: “Could you please garden a bit more efficiently, and add 150 apple trees to your small garden? We need it for our business, here is a 1000€ one-time payment”

With AI making everything worse, Free Software maintainers are now wasting their time dealing with unreviewable useless pull-requests, drowning into a sea of low-quality no-fix-provided bug reports, being demoralized by vibe-coded forks adding shiny features that are never going to be upstreamable and thus upstreamed. It really feels as if nobody is even contemplating making the pedestrian effort of trying to avoid murdering the golden goose.

Copyleft does help to mitigate those behaviours a bit, as companies aren’t usually big fans to having to release their secret source code. The Asahi Linux project recently re-licensed its software from MIT to LGPL, to make it, if only symbolically, harder for people to profit from the labor without giving anything back. Unfortunately, there are a handful of tricks to bypass copyleft:

  • Don’t use software under copyleft licenses, duh.
  • Use strong boundaries, like Android is doing: Linux for its kernel, but everything running on top of it can have whatever license
  • Rent the software to the users, every Cloud is doing that, and most ISP too.
  • Provide a context-free dump of the modifications and prevent users from modifying the code their devices are running
  • Simply ignore the license as the odds of somebody suing you are low, but big corporation do care about this kind of things, which is nice.

If copyleft isn’t the answer, maybe it’s time to find better licenses? In my opinion, the freedom 0, being able to run the program for whatever purpose, might be the crux of the problem. Reticulum‘s license has the following paragraph, because of course a decentralised secure communication network could help killing people more efficiently:

The Software shall not be used in any kind of system which includes amongst its functions the ability to purposefully do harm to human beings.

This sounds reasonable in theory, but it means that it’s not Free anymore. Do we care? Well, Linux distributions usually have strict policies (debian, fedora, …) when it comes to what software they package, with non-Free ones being either forbidden, on living in their own not-enabled-by-default dedicated repository.

One step further is the The Filthy Human Hands (FHH) License, with:

No part of a work under this license may be used or reproduced in any manner by organizations or businesses with more than fifty (50) employees. An exception is granted to allow ISPs and other hosting services to reproduce the work for the purposes of display and distribution.

No part of a work under this license may be used or reproduced in any manner which promotes bigotry of any kind. This includes but is not limited to fascism, racism, sexism, misogyny, ableism, transphobia (including erasure and/or denial of nonbinary identities), homophobia, ageism, sane-ism (including denial of multiplicity and/or plurality), and discrimination against non-human identities.

What’s interesting here, from a technical point of view, is that this isn’t really enforceable, legally speaking, as most terms are pretty vague. I think it’s by design, and must be taken as a statement. One could use any other open-to-interpretation terms and obtain the same effects, namely that any entity with a legal department won’t use it, and those small enough to not have one won’t be able to sell/rent to those who do. What’s beautiful about it, is that it does fit perfectly into the idea of the small web, of small communities with bespoke governance, of bricolage and of excluding authoritarianism/capitalism/morons/… by design.

Given the current dire state of the world, I think it’s time to realise that Free Software isn’t enough anymore, and that not wanting to have code ending up in whatever war machine bombing kids and families is less radical than the idea of Free Software at its inception 40 years ago. I’d love a weird-license repositories in Linux distributions with lovely, quirky, useful, useless, handcrafted software under all kind of bespoke ah-hoc licenses.

Shielder

11/10 TOC Kubernetes Non-Core Security Audit

TL;DR

In February 2025, Shielder was hired by OSTIF to perform a security audit of multiple projects in the Kubernetes non-core ecosystem.

Today, we are publishing the full report in our dedicated repository.

⚠️⚠️⚠️ Disclaimer ⚠️⚠️⚠️ A number of the findings remain open. This was coordinated with the Kubernetes Security Response Committee (SRC), the SIG Security Third-Party Security Audit group, and the relevant maintainers. We encourage anyone using the affected components to review the report for suggested mitigations and workarounds. Most remediation is happening in public issues and pull requests – contributions are very welcome.

CVEMon Intruder

11/13 TOC CVE-2026-121653
Currently trending CVE – Hype Score: 24 – SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.
11/13 TOC CVE-2026-124194
Currently trending CVE – Hype Score: 20 – Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
11/13 TOC CVE-2026-119948
Currently trending CVE – Hype Score: 19 – Stack-based buffer overflow in Windows Active Directory allows an authorized attacker to execute code over a network.
11/13 TOC CVE-2025-62861
Currently trending CVE – Hype Score: 18
11/13 TOC CVE-2025-20741
Currently trending CVE – Hype Score: 12 – In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; …
11/13 TOC CVE-2025-4876
Currently trending CVE – Hype Score: 8 – ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key …
11/13 TOC CVE-2026-88218
Currently trending CVE – Hype Score: 6 – Double free in Windows DNS allows an unauthorized attacker to execute code over a network.
11/13 TOC CVE-2026-117687
Currently trending CVE – Hype Score: 6 – Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality. By sending a specially crafted request that is processed by the Dynamic Publishing, an attacker may be able to execute arbitrary PHP code on the affected …
11/13 TOC CVE-2025-6224
Currently trending CVE – Hype Score: 5 – Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening on that network could sniff the certificate and trivially extract the private …
11/13 TOC CVE-2025-62860
Currently trending CVE – Hype Score: 4

Doyensec

11/11 TOC Introducing ProtoSpector: A Burp Suite Extension for Analyzing, Tamper…

Testing protocol buffers over HTTP can be a notoriously tedious process. Today, we’re excited to announce ProtoSpector, a Burp Suite extension designed to seamlessly decode and encode Protocol Buffer messages on the fly.

By eliminating the need to constantly switch to external tools or instrumented browser applications, ProtoSpector dramatically accelerates your testing workflow. Whether you want to import an existing Protobuf schema or reverse-engineer descriptors from scratch, this extension gives you the full capability to analyze, tamper with, and test gRPC traffic directly within Burp.

Features

🔄 Intelligent Message Decoding & Encoding

The extension automatically detects supported Protobuf content types and adds a ProtoSpector tab to the request view.

Two testing approaches are supported:

  • White-box Testing: Automatically matches and decodes messages using pre-loaded .proto schemas (.pb descriptor files compiled via protoc).

  • Black-box Testing: If no schema is found, it automatically infers the underlying structure, allowing you to view and fully edit the decoded message for outgoing requests (e.g., inside the Repeater tool).

ProtoSpector Request Tab

🛠️ Dynamic Signature Editing

For black-box testing scenarios, the ProtoSpector tab includes an interactive fields table that displays inferred message descriptors.

  • Inline Editing: Easily update field names or data types on the fly by clicking directly into the table cells.
  • Type Previewing: Instantly preview how any field renders when interpreted as a different data type, using the built-in selector. If a preview fails, it is typically due to an incompatibility, such as having insufficient bytes to parse the data into a larger type.

ProtoSpector Type Previewer

  • Toggleable Interface: The signature editing table can be hidden or shown at any time via the Settings tab.

🗺️ Advanced Schema & Method Management

  • Global Extension Tab: Deeply inspect, manage, and customize the signature of every loaded method descriptor across your entire session.

ProtoSpector Global Tab

  • gRPC Automation: Once a .pb file is loaded, you can select any gRPC method from the central list, right-click, and seamlessly Send to Repeater to automatically structure your request.

  • Auto-Generation: Clicking the ProtoSpector tab on an unknown request automatically generates and populates the global Method Descriptors tab with a brand-new descriptor.

Current Limitations & Roadmap

While the current version has some limitations, we are actively addressing them. Our immediate priorities include:

  • Expanded Content Type Support: We currently only support application/grpc-web+proto, application/grpc-web-text, and raw Protobuf (application/x-protobuf, application/protobuf, application/x-google-protobuf, application/vnd.google.protobuf). Future updates will expand support to include additional gRPC and Protobuf content types.

  • Enhanced Descriptor Management: Persistence functionality is currently limited when importing standalone Protobuf descriptors, which also cannot be edited at this time.

  • Refining Black-box Decoding Type Preview: We plan to refine type previewing to limit suggestions exclusively to valid field types. While repeated fields currently decode correctly, we plan to address intermittent failures in the type preview logic.

Contributing

We’d love to hear how you use ProtoSpector and what could make it better for your workflow. Whether it’s a bug report, a feature idea, or just general feedback, don’t hesitate to open an issue on GitHub or reach out on social media (@Doyensec). Pull requests are also very welcome!

Graham Cluley

11/12 TOC WhiteArmor gang claims responsibility for latest cyber attack on shipp…
Shipping giant Maersk has confirmed that one of its systems was broken into by hackers who have stolen data. The WhiteArmor gang has claimed responsbility for the attack. Read more in my article on the Hot for Security blog.
11/11 TOC Smashing Security podcast #492: How hackers turned Russian cars into p…
You’re driving your new Chinese SUV when the dashboard goes dark. Ten minutes later, your phone rings. A stranger says they’ve got the digital key to your car, and would you like it back? Of course you would. That’ll be $550. Meanwhile, three men have been charged over a scheme that used deepfakes of company bosses to steal around $130 million. Hear more about what happened, and the simple human trick that can foil the fakes. All this and more in episode 492 of the “Smashing Security” podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Danny Palmer.
11/10 TOC Iranian hackers turned up the heat on French supermarket freezers, say…
Iran has been officially accused by France of being responsible for cyber attacks last month that meddled with supermarket freezers, causing some to catch fire. Read more in my article on the Hot for Security blog.

PortSwigger Research

11/11 TOC Blind trust: stealing credentials through CSP
Content Security Policy is supposed to be the safety net that stops an HTML injection from turning into XSS. Usually it works. But sometimes it doesn’t, because the policy allows-lists a domain that h

Hacking Lab

11/30 TOC PatchIsland: Orchestration of LLM Agents for Continuous Vulnerability …

Schneier on Security

11/12 TOC Another Way Police Are Locating People from Their Smartphones

Penlink’s Webloc is an application that locates people using information from the weather, gaming, email, and religious apps on their phone. It’s sold to the police.

The tool collects vast quantities of location data from smartphones via commonly used weather, gaming, email and religious apps. It can build a detailed picture of where a smartphone has been over the past 12 months, and update the data hourly, showing the movements of people on a near real-time basis. Law enforcement officers can use Webloc to zero in on a map and look at all phones that were present at a specific place and time, analyzing “billions of location data points,” according to company documents reviewed by Bloomberg…

11/11 TOC Three People Arrested for AI-Enhanced Impersonation Fraud

It’s hard to believe how lucrative this crime can be:

According to a press release from the United States attorney’s office for the southern district of New York, three men ­ Jacob Soall, Sharon Hazan, and Guy Sheetrit ­ were arrested for using AI to alter and impersonate the voices and images of executives and attorneys at various companies in order to convince employees to send over large payments. Soall and Hazan were arrested in Spain over the summer, while Sheetrit was arrested in the United Kingdom in September. The alleged fraud took place between 2024 and 2026…

11/10 TOC New OpenSSH Vulnerability

It’s a bad one, and it’s been in the code for a decade:

A newly disclosed flaw involving OpenSSH and musl, dubbed “*sshole,” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts configured to block password authentication simply by entering an oversized password.

“Oversized” means longer than 256 bytes. Details.

Slashdot thread. And another news article.

Securelist

11/13 TOC Ransomware at the hypervisor layer: how attackers use ESXi and vCenter…
Kaspersky experts analyze a recent ransomware incident and discuss why the hypervisor layer remains difficult to monitor, what common access paths adversaries use to reach it, and how to protect your ESXi systems.
11/12 TOC Transcending the trust boundaries: how a cloud pentest works
This is the first article in a series on cloud penetration testing. We’ll cover the three cloud layers (External, Overlay, and Underlay), common architectures (OpenStack and Kubernetes), typical attack chains, and real-world incidents.
11/11 TOC Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs …
We break down the Citrus Ransomware group’s attacks: the attackers’ TTPs and tooling, including VLESS traffic tunneling and LLM use, plus their links to Toy Ghouls.
11/10 TOC IT threat evolution in Q3 2026. Non-mobile statistics
Key trends and statistics on malware targeting Windows and macOS computers and Internet of Things (IoT) devices in Q3 2026.
11/10 TOC IT threat evolution in Q3 2026. Mobile statistics
Q3 2026 mobile threat statistics for Android malware, adware, and unwanted software, plus the most notable malware found during the quarter.

Talos – Vulnerability Reports

11/12 TOC mackron dr_libs dr_mp3 drmp3_init_internal out-of-bounds read vulnerab…
11/12 TOC Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteReq…
11/12 TOC Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequ…
11/12 TOC mackron dr_libs dr_wav drwav__read_cue_to_metadata_obj out-of-bounds w…

Troy Hunt

11/10 TOC Finally, Payment by Bank Transfer Comes to Have I Been Pwned

This is simultaneously the most boring yet exciting blog title I’ve written in a long time. How you pay for services isn’t exactly a sexy topic, but it solves a problem that’s been a massive bugbear for a long time.

Here’s a

WeLiveSecurity

11/10 TOC Exchange for breakfast: Turlas Cereal tricks are not for kids
ESET Research describes Turla’s Cereal toolset, featuring a novel Exchange email collection module, a unique C&C mechanism, and sophisticated .NET execution tricks

Zero Day Initiative-Blog

11/10 TOC The November 2026 Security Update Review

The penultimate month of 2026 bring with it the usual storm of patches from Microsoft and Adobe. I’ve been prototyping some new ways to display this data, but as always, I’m open to suggestions. Seriously – hit me up on Bluesky if you have any ideas.If you’d rather watch the full video recap covering the entire release, you can check it out here:

Adobe Patches for November 2026

For the first part of the November release, Adobe released nine bulletins addressing 110 unique CVEs in Adobe Connect, Experience Manager, After Effects, Audition, Dimension, Photoshop, Media Encoder, Premiere, and Content Credentials SDK.

Here’s this month’s overview table:

Adobe Patches for November 2026

Bulletin IDProductCVE CountHighest SeverityHighest CVSSExploitedDeployment Priority
APSB26-191Adobe Connect24Critical10.0No2
APSB26-189Adobe Experience Manager14Critical9.9No2
APSB26-102Adobe Audition11High8.7No3
APSB26-100Adobe After Effects17High8.6No3
APSB26-190Adobe Dimension1High8.2No3
APSB26-181Adobe Photoshop13High7.8No3
APSB26-101Adobe Premiere11High7.8No3
APSB26-103Adobe Media Encoder6High7.8No3
APSB26-184Content Credentials SDK13Medium6.5No3
TOTAL9 bulletins110

Obviously, if you need to prioritize, the Connect patch is the biggest and most severe bulletin this month: 24 CVEs, 18 of them Critical, with a top CVSS of 10.0. It’s Priority 2, and Adobe is not aware of any exploits in the wild. Each of the CVSS10 bugs are reachable over the network with no authentication or user interaction, and each changes scope. The other Critical-rated update for this month is in Experience Manager. It addresses 14 CVEs, which includes four Critical bugs with a CVSS 9.9 rating. Two are incorrect-authorization bugs and two are code injections. All give arbitrary code execution over the network. Each needs a low-privileged account but no user interaction, and each changes scope.

Besides the bugs already mentioned, all other patched from Adobe are a Deployment Priority 3. None of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.

Microsoft Patches for November 2026

Well, at least it’s not a new record for Microsoft. As always, the overall count is a bit confusing, but I see about 1,090 new CVEs released today. At this point, does the exact number actually matter? Regardless of the actual count, it’s huge but less than the 1,400 or so released last month. That’s two months in a row that have exceeded all previous years from Microsoft. As for the products affected by this release, we have Windows and Windows components; Office and Office Components; Windows networking and remote access; Windows graphics, media and printing; Windows storage file systems and drivers; .NET and Visual Studio; Windows Security and identity; Azure, cloud and identity; Exchange Server; Microsoft Dynamics; and Xbox. We’ll see how close I came to matching Microsoft’s “Cohorts” list.

 Interestingly, there is only one bug under active attack, and none are publicly known this month. While this is encouraging, it does not mean we’re seeing less exploitation in the wild. It does mean we are seeing fewer 0-days exploited in the wild. This makes sense, as AI is better at reversing patches than it is at finding and exploiting bugs in closed-source software.

Let’s begin by covering some of the more severe and interesting patches released this month.

–              CVE-2026-124194 – Microsoft Outlook Spoofing Vulnerability
This is the one bug under active attack this month. It’s labeled spoofing, but the impact is bigger than the name suggests. An attacker sends a specially crafted message file and convinces a user to open it. Outlook then connects to an attacker-controlled network location without showing the usual external-content warning, which discloses the user’s NTLMv2 hash. The attacker can use that hash to authenticate as the user. The Preview Pane is not an attack vector, and the CVSS is only 6.5, so don’t let the score lull you. Microsoft marks it as exploited, so this one goes to the top of the list.

–              CVE-2026-116928 – Windows Search Remote Code Execution Vulnerability
We start with Windows Search, which is reached through Exchange Server. This bug allows an unauthenticated attacker to send an email with a specially crafted attachment that triggers the bug when the server automatically indexes it. The recipient never opens anything. It is a zero-click code execution bug on a high-value target. It’s also a CVSS 9.8 and clearly more severe than any of the nine patches Exchange receives this month.

–              CVE-2026-119958 – Windows LDAP – Lightweight Directory Access Protocol Remote Code Execution Vulnerability
This patch addresses a bug that allows an unauthenticated attacker to exploit an out-of-bounds (OOB) write (CWE-787) by sending crafted LDAP calls over the network, with no user interaction. Since it runs code in the LDAP service context, it could be quite destructive, especially on Domain Controllers. Test and deploy this one quickly.

–              CVE-2026-119990 – Azure OpenAI Elevation of Privilege Vulnerability
UPDATE: Microsoft has revised this bulletin to indicate there is no customer action needed.
This is an odd duck. The bulletin says “Customer Action Required: Yes” for this bug, but nothing in the advisory tells customers what to do. There are no mitigations, workarounds, or customer steps. The FAQ says an unauthenticated attacker can send a crafted request over the internet to an affected Azure OpenAI service, with no account or user interaction. The impact is access to orchestration information, workflow changes, or service disruption. Hopefully, Microsoft adds some direction here soon.

–              CVE-2026-119952 – Windows Schannel Remote Code Execution Vulnerability
This flaw allows an unauthenticated attacker to exploit arbitrary code over a network without user interaction. Microsoft rates this bug as “Exploitation More Likely”. It is one of only a few Critical-rated patches with that rating. They also list the attack complexity as high, which is why the CVSS score is lower than the others. I would still put this near the top of my list.

–              CVE-2026-95962 – Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability
I include this one because it’s in a little-documented component. It’s not the first CVE in VFP, but it appears to be just the second. It’s a use-after-free that allows an unauthenticated attacker to get code execution on affected targets by sending a specially crafted packet to the affected service over the network. No authentication or user interaction is needed. There is a race condition here, but we see those overcome all the time at Pwn2Own. This should be an interesting component to watch.

–              CVE-2026-112967 – Windows Xbox Live Networking Service Remote Code Execution Vulnerability
You don’t see a lot of Xbox Live bugs, but here we are with a CVSS 9.8.  This bug is a heap overflow that doesn’t need authentication or user interaction. Microsoft states the attacker can “gain remote code execution via an in-network attacker calling arbitrary endpoints.” Is this really likely? Probably not, but it’s fun to think of Xbox Live exploits in the wild.

On to those that are Wormable…

Last month saw 59 bugs that fit this definition. This month, it’s a bit less. A total of 30 of the November CVEs fit my definition of wormable. Specifically, 17 contain the advisory language describing an unauthenticated attacker executing code over the network with no authentication or user interaction required. The other 13 use variant wording or have no FAQ, but their summaries and CVSS vectors (AV:N/PR:N/UI:N) describe the same thing.

These bugs are as follows:

I may be wrong about some of these, since a few advisories are light on detail. As always, I recommend testing and deploying these patches quickly, especially for network-facing services like DNS, DHCP, LDAP, and Exchange

Here’s the full list of CVEs released by Microsoft for November 2026:

CVE Title Severity CVSS Public Exploited XI Type
CVE-2026-124194 Microsoft Outlook Spoofing Vulnerability Moderate 6.5 No Yes 0 Spoofing
CVE-2026-118148 Active Directory Domain Services Elevation of Privilege Vulnerability Critical 7.5 No No 1 EoP
CVE-2026-114160 Azure Managed Grafana Elevation of Privilege Vulnerability Critical 9.8 No No 2 EoP
CVE-2026-119990 Azure OpenAI Elevation of Privilege Vulnerability Critical 9.8 No No N/A EoP
CVE-2026-119969 Graphic Fonts Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-122194 Microsoft Defender Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-118207 Microsoft Exchange Server Remote Code Execution Vulnerability Critical 8.8 No No 1 RCE
CVE-2026-118292 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-118296 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-118297 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-118701 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-118702 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-118711 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-118713 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-118730 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-120786 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-120788 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-120789 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-124170 Microsoft Office Excel Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-110043 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-110068 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-111309 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-111289 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-120003 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-110047 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-110067 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-111285 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-124185 Microsoft Office Word Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-120005 Microsoft PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-113749 Microsoft Windows Codecs Library Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-118737 Remote Procedure Call Runtime Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-118146 Windows Active Directory Domain Services Remote Code Execution Vulnerability Critical 8.8 No No 1 RCE
CVE-2026-119962 Windows CredSSP Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-119951 Windows Deployment Services Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-125134 Windows Function Discovery Resource Publication Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-118145 Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-119966 Windows Graphics Kernel Elevation of Privilege Vulnerability Critical 7.5 No No 2 EoP
CVE-2026-125137 Windows Graphics Kernel Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP
CVE-2026-113753 Windows Hyper-V Elevation of Privilege Vulnerability Critical 8.2 No No 2 EoP
CVE-2026-113856 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP
CVE-2026-113860 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7 No No 2 EoP
CVE-2026-113861 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.5 No No 2 EoP
CVE-2026-113864 Windows Hyper-V Elevation of Privilege Vulnerability Critical 6.4 No No 2 EoP
CVE-2026-113865 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP
CVE-2026-119947 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.5 No No 2 EoP
CVE-2026-119960 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.5 No No 2 EoP
CVE-2026-119961 Windows Internet Information Services Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-119958 Windows LDAP – Lightweight Directory Access Protocol Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE
CVE-2026-109459 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-119967 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-116710 Windows Message Queuing Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-119963 Windows Message Queuing Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-119964 Windows Message Queuing Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE
CVE-2026-113862 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability Critical 8.1 No No 1 RCE
CVE-2026-125136 Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-113752 Windows Print Spooler Components Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-114169 Windows Raw Image Extension Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-119957 Windows Remote Desktop Services Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP
CVE-2026-113825 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-119952 Windows Schannel Remote Code Execution Vulnerability Critical 8.1 No No 1 RCE
CVE-2026-116928 Windows Search Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE
CVE-2026-113859 Windows TCP/IP Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-119382 Windows TPM Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP
CVE-2026-112967 Windows Xbox Live Networking Service Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE
CVE-2026-109475 .NET Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-118747 .NET Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-120796 .NET Denial of Service Vulnerability Important 5.3 No No 2 DoS
CVE-2026-105544 .NET Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-114155 .NET Elevation of Privilege Vulnerability Important 7.5 No No N/A EoP
CVE-2026-118746 .NET Security Feature Bypass Vulnerability Important 6.8 No No 2 SFB
CVE-2026-84004 AMD Zen Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-84005 AMD Zen Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-109478 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-114147 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-114149 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-114154 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-118748 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-118749 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-118750 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-109481 ASP.NET Core Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-114146 ASP.NET Core Elevation of Privilege Vulnerability Important 9 No No 2 EoP
CVE-2026-118741 ASP.NET Core Elevation of Privilege Vulnerability Important 8.1 No No 2 EoP
CVE-2026-109476 ASP.NET Core Information Disclosure Vulnerability Important 6.1 No No 2 Info
CVE-2026-114150 ASP.NET Core Information Disclosure Vulnerability Important 5.9 No No 2 Info
CVE-2026-114156 ASP.NET Core Security Feature Bypass Vulnerability Important 6.5 No No 2 SFB
CVE-2026-114157 ASP.NET Core Security Feature Bypass Vulnerability Important 7.5 No No 2 SFB
CVE-2026-118735 Active Directory Domain Services Elevation of Privilege Vulnerability Important 7.5 No No 3 EoP
CVE-2026-123387 Active Directory Domain Services Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-119889 ActiveSyncProvider Information Disclosure Vulnerability Important 6.5 No No 3 Info
CVE-2026-120006 Aspire Elevation of Privilege Vulnerability Important No No 2 EoP
CVE-2026-120778 Aspire Elevation of Privilege Vulnerability Important 7.3 No No 2 EoP
CVE-2026-120792 Aspire Information Disclosure Vulnerability Important 7.3 No No 2 Info
CVE-2026-118740 Aspire Security Feature Bypass Vulnerability Important 9.1 No No 2 SFB
CVE-2026-109457 Azure CLI Remote Code Execution Vulnerability Important 8 No No 2 RCE
CVE-2026-121668 Azure Confidential Clean Rooms Tampering Vulnerability Important No No 2 Tampering
CVE-2026-102224 Azure CycleCloud Elevation of Privilege Vulnerability Important 8.4 No No 2 EoP
CVE-2026-113822 Azure CycleCloud Elevation of Privilege Vulnerability Important 6.5 No No N/A EoP
CVE-2026-114161 Azure CycleCloud Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-113823 Azure CycleCloud Information Disclosure Vulnerability Important 7.5 No No 2 Info
CVE-2026-120783 Azure DevOps Server Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP
CVE-2026-85923 Azure DevOps Server Elevation of Privilege Vulnerability Important 8.8 No No N/A EoP
CVE-2026-112745 Azure DevOps Server Information Disclosure Vulnerability Important 6.5 No No 1 Info
CVE-2026-109467 Azure DevOps Server Remote Code Execution Vulnerability Important 9.9 No No N/A RCE
CVE-2026-109462 Azure Firmware Security Feature Bypass Vulnerability Important 4.4 No No 2 SFB
CVE-2026-118742 Azure Front Door Elevation of Privilege Vulnerability Important 8.6 No No N/A EoP
CVE-2026-105494 Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability Important No No 2 EoP
CVE-2026-119989 Azure Pipelines Remote Code Execution Vulnerability Important 8.2 No No 2 RCE
CVE-2026-96007 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119883 Data Deduplication Security Feature Bypass Vulnerability Important 3.3 No No 2 SFB
CVE-2026-95963 Data Sharing Service Client Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-105528 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105581 Desktop Window Manager Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-113819 Desktop Window Manager Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-96103 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96172 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96174 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96175 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-94507 DirectX Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure Vulnerability Important 5.5 No No N/A Info
CVE-2026-96084 Graphic Fonts Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-88211 Graphic Fonts Information Disclosure Vulnerability Important 5.7 No No 2 Info
CVE-2026-100204 HEIF Image Extensions Remote Code Execution Vulnerability Important 7 No No 2 RCE
CVE-2026-114164 HEVC Video Extensions Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-114165 HEVC Video Extensions Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-114167 HEVC Video Extensions Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-122173 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-125135 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-96010 HID Parser Library Elevation of Privilege Vulnerability Important 8.8 No No 3 EoP
CVE-2026-96974 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP
CVE-2026-96979 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP
CVE-2026-96982 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP
CVE-2026-96059 HID class driver Information Disclosure Vulnerability Important 5.5 No No 3 Info
CVE-2026-119942 HTTP.sys Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-119946 HTTP.sys Information Disclosure Vulnerability Important 5.9 No No 2 Info
CVE-2026-70003 JDBC Driver for SQL Server Security Feature Bypass Vulnerability Important 8.7 No No 2 SFB
CVE-2026-119937 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-105537 Mailslot File System Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-109485 Microsoft 365 Agents SDK Information Disclosure Vulnerability Important 6.3 No No 2 Info
CVE-2026-112974 Microsoft Account Tampering Vulnerability Important 5.5 No No 2 Tampering
CVE-2026-112982 Microsoft Account Tampering Vulnerability Important 5.5 No No 2 Tampering
CVE-2026-96158 Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-108470 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability Important No No 2 Info
CVE-2026-108469 Microsoft Authentication Library for JavaScript Spoofing Vulnerability Important 6.8 No No 2 Spoofing
CVE-2026-118288 Microsoft Azure File Sync Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-70120 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-85929 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96054 Microsoft Color Management Remote Code Execution Vulnerability Important 7 No No 2 RCE
CVE-2026-96067 Microsoft Color Management Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-96078 Microsoft Color Management Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-119991 Microsoft Configuration Manager Information Disclosure Vulnerability Important 5.9 No No 2 Info
CVE-2026-95882 Microsoft DirectMusic Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-95891 Microsoft DirectMusic Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-95896 Microsoft DirectMusic Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-95901 Microsoft DirectMusic Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-122196 Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-109460 Microsoft Entra Private Network Connector Information Disclosure Vulnerability Important 5.5 No No N/A Info
CVE-2026-118153 Microsoft Exchange Server Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-118150 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118151 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.2 No No 2 EoP
CVE-2026-118154 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118157 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.2 No No 2 EoP
CVE-2026-118149 Microsoft Exchange Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-118152 Microsoft Exchange Server Spoofing Vulnerability Important 6.5 No No 2 Spoofing
CVE-2026-118208 Microsoft Exchange Server Spoofing Vulnerability Important 7.1 No No 2 Spoofing
CVE-2026-114162 Microsoft Graph Elevation of Privilege Vulnerability Important 9.1 No No 2 EoP
CVE-2026-112754 Microsoft Graphics Component Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-122987 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability Important 5.9 No No 2 EoP
CVE-2026-105505 Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105578 Microsoft JScript Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-109492 Microsoft MCP Gateway Elevation of Privilege Vulnerability Important No No N/A EoP
CVE-2026-108411 Microsoft ODBC Driver Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-109493 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-109498 Microsoft Office Access Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-110058 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110059 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110060 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111301 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111305 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118715 Microsoft Office Excel Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118725 Microsoft Office Excel Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-111292 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-118300 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-118727 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-118728 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-119999 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-123395 Microsoft Office Excel Information Disclosure Vulnerability Important 5.9 No No 2 Info
CVE-2026-124178 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-124179 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-124183 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-116927 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118293 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118294 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118295 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118298 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118299 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118301 Microsoft Office Excel Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-118302 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118700 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118703 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118704 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118705 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118706 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118707 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118708 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118709 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118710 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118712 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118714 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118716 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118717 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118718 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118719 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118720 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118721 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118722 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118723 Microsoft Office Excel Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-118724 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118726 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118729 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118731 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118732 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119986 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-120785 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-120790 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-120791 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123385 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-124174 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-124176 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-124187 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-124229 Microsoft Office Excel Remote Code Execution Vulnerability Important 6.6 No No 2 RCE
CVE-2026-111291 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-111293 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-112731 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-119993 Microsoft Office Outlook Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-119995 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-119996 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-119997 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-123375 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123376 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123377 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123378 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-123379 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-123380 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123381 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123382 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123383 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123384 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-124227 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-124228 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112738 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-116922 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-112734 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112737 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-120001 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111286 Microsoft Office Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-116717 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-122198 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119998 Microsoft Office Security Feature Bypass Vulnerability Important 6.5 No No 2 SFB
CVE-2026-109466 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-109495 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-109502 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-111296 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-123391 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No 3 EoP
CVE-2026-80095 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 9 No No 2 EoP
CVE-2026-88176 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-109455 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-110057 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-124210 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-109464 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-109472 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-109499 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110044 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-120000 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-123390 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No N/A RCE
CVE-2026-109454 Microsoft Office SharePoint Spoofing Vulnerability Important 9 No No 2 Spoofing
CVE-2026-109456 Microsoft Office SharePoint Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-109497 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing
CVE-2026-109504 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing
CVE-2026-110045 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing
CVE-2026-110065 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing
CVE-2026-111297 Microsoft Office SharePoint Spoofing Vulnerability Important 8 No No 2 Spoofing
CVE-2026-111300 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing
CVE-2026-111303 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing
CVE-2026-112736 Microsoft Office SharePoint Spoofing Vulnerability Important 5.3 No No 2 Spoofing
CVE-2026-109494 Microsoft Office Visio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-109496 Microsoft Office Visio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110046 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-110051 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-110066 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-111288 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-112720 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-116721 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-124233 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-109491 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-109500 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-109501 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-109503 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-109505 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110050 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110052 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-110053 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-110054 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110056 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-110061 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110062 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110064 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111287 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-111290 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111294 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111295 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111298 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111299 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111302 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-111304 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111306 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111307 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111308 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-111310 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112714 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112715 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112716 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112717 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112718 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112719 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112721 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112722 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112723 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112724 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112726 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112728 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112729 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112730 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112733 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112735 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112739 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112741 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116718 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-116719 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116720 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116722 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116923 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116925 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-123394 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-109487 Microsoft PowerPoint Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-122985 Microsoft PowerShell Information Disclosure Vulnerability Important 6.1 No No 2 Info
CVE-2026-113815 Microsoft PowerShell Security Feature Bypass Vulnerability Important 4.7 No No 2 SFB
CVE-2026-124226 Microsoft PowerShell Security Feature Bypass Vulnerability Important 8.8 No No 2 SFB
CVE-2026-105512 Microsoft QUIC Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-88236 Microsoft QUIC Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-114166 Microsoft Raw Image Extension Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-105492 Microsoft Remote Registry Service Denial of Service Vulnerability Important 5.3 No No 2 DoS
CVE-2026-116929 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-116934 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-116944 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.2 No No 2 EoP
CVE-2026-118105 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118108 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-118109 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118110 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118111 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-118112 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-118113 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-118114 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-118115 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-118116 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-118117 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-118118 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-118119 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-118120 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-66813 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.1 No No 2 EoP
CVE-2026-67375 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-67387 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-84010 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-94513 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 3 EoP
CVE-2026-116932 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-116935 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-116939 Microsoft SQL Server Information Disclosure Vulnerability Important 5.7 No No 2 Info
CVE-2026-116940 Microsoft SQL Server Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-116943 Microsoft SQL Server Information Disclosure Vulnerability Important 7.5 No No 2 Info
CVE-2026-118102 Microsoft SQL Server Information Disclosure Vulnerability Important 5.9 No No 2 Info
CVE-2026-118103 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-118104 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-67382 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-68783 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-116930 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116931 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-116933 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.2 No No 2 RCE
CVE-2026-116936 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.2 No No 2 RCE
CVE-2026-116937 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-116938 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-116941 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116942 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116945 Microsoft SQL Server Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-116946 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-116947 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-118106 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-67372 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-67374 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-67391 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-67632 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-67637 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-67646 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-120002 Microsoft SharePoint Server Elevation of Privilege Vulnerability Important 9.9 No No 2 EoP
CVE-2026-116926 Microsoft Teams Spoofing Vulnerability Important 7.5 No No 2 Spoofing
CVE-2026-122979 Microsoft Teams for Android Spoofing Vulnerability Important 8.1 No No N/A Spoofing
CVE-2026-69901 Microsoft Teams for Android Spoofing Vulnerability Important 7.5 No No N/A Spoofing
CVE-2026-121681 Microsoft Trace Data Helper Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-122172 Microsoft Trace Data Helper Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-116698 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-116699 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 6.5 No No 3 RCE
CVE-2026-85838 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-85839 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-88222 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119987 Microsoft Windows App Store Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96150 Microsoft Windows Codecs Library Information Disclosure Vulnerability Important 5.6 No No 2 Info
CVE-2026-122168 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96157 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-105586 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113821 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Important 4.1 No No 3 Info
CVE-2026-119943 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119954 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119904 Microsoft Windows Speech Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-97002 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-110048 Microsoft Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-110049 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-110055 Microsoft Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-113759 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-119881 Microsoft XPS Document Converter Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-119880 Microsoft XPS Document Converter Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-122171 Microsoft XPS Document Converter Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-66801 Microsoft Xbox Remote Code Execution Vulnerability Important No No 2 RCE
CVE-2026-62903 Microsoft.Data.SqlClient Information Disclosure Vulnerability Important No No 2 Info
CVE-2026-124224 PowerShell Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-121669 PowerShell Information Disclosure Vulnerability Important 6.1 No No 2 Info
CVE-2026-121674 PowerShell Information Disclosure Vulnerability Important 6.1 No No 2 Info
CVE-2026-121675 PowerShell Information Disclosure Vulnerability Important 6.1 No No 2 Info
CVE-2026-119387 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119388 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-123389 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-83894 RPC Runtime Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-116697 Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability Important 5.9 No No 2 DoS
CVE-2026-119853 Remote Access API Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-119390 Remote Desktop Client Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-119858 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-119934 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-95964 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No 3 RCE
CVE-2026-119824 Remote Desktop Client Tampering Vulnerability Important 8.8 No No 2 Tampering
CVE-2026-80094 Remote Desktop Gateway Service Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-108401 Remote Desktop Services Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119972 Remote Procedure Call Denial of Service Vulnerability Important 5.9 No No 2 DoS
CVE-2026-96017 Role: DNS Server Denial of Service Vulnerability Important 4.9 No No 3 DoS
CVE-2026-96975 Role: DNS Server Denial of Service Vulnerability Important 5.9 No No 2 DoS
CVE-2026-88111 SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-94511 SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-96989 Secondary Logon Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-118140 Server for NFS Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-88235 Servicing Stack Updates Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-113748 Software Protection Platform (SPP) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119395 Storport.sys Driver Information Disclosure Vulnerability Important 4 No No 2 Info
CVE-2026-119849 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability Important 7 No No 2 RCE
CVE-2026-119981 Visual Studio Code Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119976 Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-102230 Visual Studio Code Information Disclosure Vulnerability Important 7.4 No No 2 Info
CVE-2026-119975 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119985 Visual Studio Code Remote Code Execution Vulnerability Important 8.3 No No 2 RCE
CVE-2026-120779 Visual Studio Code Remote Code Execution Vulnerability Important 9.6 No No 2 RCE
CVE-2026-120780 Visual Studio Code Remote Code Execution Vulnerability Important 8.3 No No 2 RCE
CVE-2026-121662 Visual Studio Code Remote Code Execution Vulnerability Important 8.6 No No 1 RCE
CVE-2026-121664 Visual Studio Code Remote Code Execution Vulnerability Important 8.3 No No 2 RCE
CVE-2026-70094 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-102236 Visual Studio Code Security Feature Bypass Vulnerability Important 8.6 No No 2 SFB
CVE-2026-114171 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No 2 SFB
CVE-2026-119982 Visual Studio Code Security Feature Bypass Vulnerability Important 6.5 No No 2 SFB
CVE-2026-119983 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No 2 SFB
CVE-2026-120782 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No 2 SFB
CVE-2026-121660 Visual Studio Code Security Feature Bypass Vulnerability Important 7.5 No No 2 SFB
CVE-2026-121661 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No 2 SFB
CVE-2026-121663 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No 1 SFB
CVE-2026-121665 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No 2 SFB
CVE-2026-114151 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-114152 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-114158 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-114159 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-118745 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-105017 Volume Shadow Copy Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119941 Volume Shadow Copy Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119825 Win32k Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-119856 Win32k Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-119910 Win32k Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-95893 Win32k Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112727 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-96002 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-96020 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-96064 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-96092 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.1 No No 3 RCE
CVE-2026-96177 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-95884 Windows Active Directory Certificate Services Information Disclosure Vulnerability Important 5.3 No No 2 Info
CVE-2026-105590 Windows Active Directory Certificate Services Security Feature Bypass Important 5.3 No No 2 SFB
CVE-2026-105559 Windows Active Directory Denial of Service Vulnerability Important 6.5 No No 2 DoS
CVE-2026-105568 Windows Active Directory Domain Services Denial of Service Vulnerability Important 6.5 No No 2 DoS
CVE-2026-119948 Windows Active Directory Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-122988 Windows Admin Center Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-105020 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105021 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105022 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105023 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105025 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105026 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105490 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105491 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105493 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105495 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105496 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105497 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105498 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105499 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118215 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-118216 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118217 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118218 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118219 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118221 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118222 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-118223 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-118224 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-118225 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118226 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118227 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118228 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118229 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118232 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118277 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118278 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118279 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118280 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-118283 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-94515 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95960 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-118214 Windows Advanced Rasterization Platform Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-88242 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-95944 Windows App Readiness Service Tampering Vulnerability Important 5.5 No No 2 Tampering
CVE-2026-96018 Windows AppContainer Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-116714 Windows AppX Deployment Service Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-88224 Windows AppX Deployment Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96074 Windows AppX Package Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105541 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119888 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119893 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119894 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119895 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-121671 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96038 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96155 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-122175 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-105554 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119405 Windows Backup Engine Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-70182 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-88239 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95877 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96127 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119832 Windows BitLocker Security Feature Bypass Vulnerability Important 5.9 No No 2 SFB
CVE-2026-97015 Windows BitLocker Security Feature Bypass Vulnerability Important 6.8 No No 2 SFB
CVE-2026-88187 Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-95996 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-88213 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96001 Windows Bluetooth Service Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112761 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113762 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119401 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119402 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119403 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-88221 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-94529 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95871 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96156 Windows Broker Infrastructure Service Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-88245 Windows Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95979 Windows Brokering File System Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96097 Windows Brokering File System Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-108405 Windows CD-ROM Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-108404 Windows CD-ROM Driver Remote Code Execution Vulnerability Important 6.8 No No 2 RCE
CVE-2026-103571 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105533 Windows COM Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112968 Windows COM Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-94531 Windows COM Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-113767 Windows COM+ Event System Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-113769 Windows COM+ Event System Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119855 Windows COM+ Event System Service Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-85942 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-88232 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-88238 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-118138 Windows Client for NFS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-122165 Windows Client for NFS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95885 Windows Client for NFS Elevation of Privilege Vulnerability Important 8.1 No No 2 EoP
CVE-2026-118141 Windows Client for NFS Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-88249 Windows Client for NFS Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119404 Windows Client for NFS Security Feature Bypass Vulnerability Important 5.9 No No 2 SFB
CVE-2026-96162 Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105569 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112763 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-112810 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119974 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112803 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112809 Windows Composite Image File System Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96072 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96088 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96101 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96042 Windows Connection Manager Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96043 Windows Connection Manager Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112753 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113761 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113771 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 5.5 No No 2 EoP
CVE-2026-105562 Windows Container Manager Service Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-119393 Windows Credential Manager Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-96978 Windows Credential User Interface Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-118739 Windows DHCP Client Denial of Service Vulnerability Important 6.5 No No 2 DoS
CVE-2026-113863 Windows DHCP Client Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-88240 Windows DHCP Client Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-96115 Windows DHCP Client Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-119890 Windows DHCP Server Denial of Service Vulnerability Important 5.3 No No 2 DoS
CVE-2026-96134 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-105588 Windows DHCP Server Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP
CVE-2026-105557 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No 2 Info
CVE-2026-105560 Windows DHCP Server Remote Code Execution Vulnerability Important 7.2 No No 2 RCE
CVE-2026-72998 Windows DHCP Server Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-88216 Windows DHCP Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-88243 Windows DHCP Server Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-113773 Windows DHCP Server Spoofing Vulnerability Important 5.3 No No 2 Spoofing
CVE-2026-96076 Windows DIAL Client Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96176 Windows DNS Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-96983 Windows DNS Denial of Service Vulnerability Important 5.3 No No 3 DoS
CVE-2026-105520 Windows DNS Elevation of Privilege Vulnerability Important 7.2 No No 2 EoP
CVE-2026-119953 Windows DNS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96179 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP
CVE-2026-105579 Windows DNS Information Disclosure Vulnerability Important 7.5 No No 2 Info
CVE-2026-108425 Windows DNS Information Disclosure Vulnerability Important 5.9 No No 2 Info
CVE-2026-119970 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96970 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96976 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96980 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96984 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96985 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96986 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96987 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96988 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-97006 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-109463 Windows DNS Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-113855 Windows DNS Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-88218 Windows DNS Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-119971 Windows DNS Server Information Disclosure Vulnerability Important 4.9 No No 2 Info
CVE-2026-96112 Windows DNS Server Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96972 Windows DNS Server Information Disclosure Vulnerability Important 7.5 No No 2 Info
CVE-2026-81384 Windows DNS Server Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-119905 Windows DNS Spoofing Vulnerability Important 4.9 No No 2 Spoofing
CVE-2026-113763 Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability Important 6.3 No No 3 EoP
CVE-2026-105575 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105582 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105583 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112986 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112758 Windows Defender Firewall Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112977 Windows Deployment Services Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-113818 Windows Deployment Services Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-118213 Windows Deployment Services Information Disclosure Vulnerability Important 5.9 No No 2 Info
CVE-2026-105558 Windows Deployment Services Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-112988 Windows Desktop Window Manager Elevation of Privilege Vulnerability Important 5.5 No No 2 EoP
CVE-2026-113758 Windows Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112743 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119844 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119866 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119874 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113750 Windows Device Inventory Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113817 Windows Devices Human Interface Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-112800 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95934 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95976 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-118142 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119917 Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119919 Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105527 Windows Encrypting File System (EFS) Denial of Service Vulnerability Important 5.5 No No 2 DoS
CVE-2026-96973 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119394 Windows Enhanced Storage Remote Code Execution Vulnerability Important 6.6 No No 2 RCE
CVE-2026-105540 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-85862 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-94525 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95947 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96153 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112793 Windows Event Collector Service Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-112796 Windows Event Collector Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95997 Windows Event Logging Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95977 Windows Event Viewer Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-118137 Windows FTP Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119869 Windows Failover Cluster Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP
CVE-2026-113751 Windows Fast FAT Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96075 Windows Feedback Hub Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-108415 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP
CVE-2026-108416 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-108421 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-113765 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-113754 Windows FileCrypt Driver Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-113757 Windows FileCrypt Driver Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-113756 Windows FileCrypt Driver Security Feature Bypass Vulnerability Important 5.3 No No 2 SFB
CVE-2026-113755 Windows Filter Manager Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-121673 Windows Filter Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105553 Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112756 Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-88215 Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP
CVE-2026-119907 Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-108407 Windows GDI Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-94527 Windows GDI Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-108424 Windows GDI Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-94519 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95879 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95888 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95895 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95906 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95909 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95922 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95932 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95935 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-95938 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95942 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95948 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95950 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95953 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95966 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95971 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95973 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95974 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95983 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-95991 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96122 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96124 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96126 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-96160 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96168 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96171 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119841 Windows Graphics Kernel Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-88217 Windows Graphics Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-95946 Windows Graphics Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96048 Windows Graphics Kernel Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-96133 Windows Graphics Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96137 Windows Graphics Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96144 Windows Graphics Kernel Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-119992 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-95923 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119385 Windows Hyper-V Denial of Service Vulnerability Important 4.7 No No 2 DoS
CVE-2026-119955 Windows Hyper-V Denial of Service Vulnerability Important 6 No No 2 DoS
CVE-2026-95913 Windows Hyper-V Denial of Service Vulnerability Important 5.9 No No 2 DoS
CVE-2026-96965 Windows Hyper-V Denial of Service Vulnerability Important 5.3 No No 2 DoS
CVE-2026-119391 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119826 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95910 Windows Hyper-V Security Feature Bypass Vulnerability Important 6.7 No No 2 SFB
CVE-2026-119959 Windows Hyper-V Spoofing Vulnerability Important 5.3 No No 2 Spoofing
CVE-2026-122169 Windows IKE Extension Spoofing Vulnerability Important 7.5 No No 2 Spoofing
CVE-2026-119871 Windows IP Translation Configuration Service Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP
CVE-2026-122163 Windows Image Acquisition Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-96164 Windows Imaging Component Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119862 Windows Input System Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-119916 Windows Input System Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105501 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-105507 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105532 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105543 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105545 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113847 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119398 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-119399 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119831 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119852 Windows Installer Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP
CVE-2026-119865 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119892 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-119903 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-119929 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95951 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96004 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96008 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96019 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96026 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96027 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96028 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96029 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96035 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96036 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96046 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96047 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96060 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96061 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96062 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96073 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96085 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96152 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112789 Windows Installer Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-119838 Windows Installer Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-119887 Windows Installer Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-119867 Windows Installer Security Feature Bypass Vulnerability Important 5.3 No No 2 SFB
CVE-2026-96093 Windows Internet (wininet.dll) Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-118124 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119859 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119860 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119861 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-122179 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119909 Windows Internet Information Services Denial of Service Vulnerability Important 5.9 No No 2 DoS
CVE-2026-119936 Windows Internet Information Services Denial of Service Vulnerability Important 5.9 No No 2 DoS
CVE-2026-105584 Windows Inventory Backup Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112985 Windows JScript Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-119940 Windows Kerberos Denial of Service Vulnerability Important 6.5 No No 3 DoS
CVE-2026-70240 Windows Kerberos Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-96082 Windows Kerberos Denial of Service Vulnerability Important 6.5 No No 2 DoS
CVE-2026-119847 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-122164 Windows Kerberos Elevation of Privilege Vulnerability Important 8 No No 3 EoP
CVE-2026-85844 Windows Kerberos Elevation of Privilege Vulnerability Important 9.8 No No 2 EoP
CVE-2026-105504 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105513 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105566 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-108403 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-109473 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-112790 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-112802 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112805 Windows Kernel Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-112969 Windows Kernel Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-114170 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-118143 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP
CVE-2026-119868 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119884 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP
CVE-2026-119912 Windows Kernel Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP
CVE-2026-119918 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-119935 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP
CVE-2026-119965 Windows Kernel Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP
CVE-2026-122183 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-94514 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-95905 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-95988 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-96031 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96052 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-96129 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-105552 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-119857 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96058 Windows Kernel Information Disclosure Vulnerability Important 4.6 No No 2 Info
CVE-2026-112973 Windows Kernel Security Feature Bypass Vulnerability Important 7.1 No No 2 SFB
CVE-2026-119397 Windows Kernel Transaction Manager Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-94522 Windows Kernel Transaction Manager Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-122297 Windows Kernel Transaction Manager Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-94517 Windows Kernel Transaction Manager Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96139 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-88230 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-96117 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-113766 Windows Language Experience Service Tampering Vulnerability Important 3.3 No No 2 Tampering
CVE-2026-108402 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Important 5.3 No No 3 DoS
CVE-2026-116707 Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-116706 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-88244 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Important 7.5 No No 3 RCE
CVE-2026-112975 Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability Important 5.3 No No 2 DoS
CVE-2026-113816 Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability Important 4.1 No No 3 EoP
CVE-2026-112807 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Important 6.5 No No 2 DoS
CVE-2026-70231 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-85801 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-88227 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-88228 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96016 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96066 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95876 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105565 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No 2 EoP
CVE-2026-105574 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No 2 EoP
CVE-2026-119901 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 6.4 No No 2 EoP
CVE-2026-105503 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105524 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-105546 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112814 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 5.5 No No 2 EoP
CVE-2026-95920 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-108410 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112965 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-105580 Windows Management Instrumentation Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-119836 Windows Management Services Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-122182 Windows Maps Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-88229 Windows Media Player Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-105515 Windows Message Queuing Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-119848 Windows Message Queuing Denial of Service Vulnerability Important 5.3 No No 2 DoS
CVE-2026-118125 Windows Message Queuing Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-118126 Windows Message Queuing Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119833 Windows Message Queuing Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119816 Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-119921 Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119944 Windows Mobile Device Management Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-112987 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113820 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96184 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-102219 Windows Modern Device Management (MDM) Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-119945 Windows Modern Device Management (MDM) Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-118220 Windows Multiple Provider Router Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-100223 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119900 Windows NTFS Elevation of Privilege Vulnerability Important 7.3 No No 2 EoP
CVE-2026-119933 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-105542 Windows NTFS Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-113848 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No 3 RCE
CVE-2026-102200 Windows NTFS Tampering Vulnerability Important 4.7 No No 2 Tampering
CVE-2026-113844 Windows NTFS Tampering Vulnerability Important 5.5 No No 2 Tampering
CVE-2026-121680 Windows NTLM Spoofing Vulnerability Important 7.5 No No 2 Spoofing
CVE-2026-105551 Windows NetBIOS Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-112798 Windows NetBIOS Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-119873 Windows NetBIOS Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96971 Windows NetBIOS Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-88212 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability Important 7.5 No No 3 RCE
CVE-2026-105525 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-108406 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119821 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-118736 Windows Network File System Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-105587 Windows OLE DB Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95933 Windows OLE Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96110 Windows OLE Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112760 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112813 Windows Overlay Filter Elevation of Privilege Vulnerability Important 4.7 No No 2 EoP
CVE-2026-119822 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-121670 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-108409 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112750 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96981 Windows PCI Bus Driver Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP
CVE-2026-96992 Windows PCI Bus Driver Elevation of Privilege Vulnerability Important 6.4 No No 3 EoP
CVE-2026-105018 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-88220 Windows Performance Counters Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-113768 Windows Performance Counters Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-95975 Windows Performance Counters Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-96993 Windows Performance Monitor Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-96107 Windows Phone Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105511 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-118123 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-124225 Windows PowerShell Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-105567 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112752 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112762 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-112765 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112791 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-112792 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112797 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112811 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-112976 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112978 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112980 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP
CVE-2026-112981 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-113770 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119913 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119939 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119950 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-105531 Windows Print Spooler Components Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112806 Windows Print Spooler Components Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-112808 Windows Print Spooler Components Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-119898 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119928 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-123388 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-88247 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-112799 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-108414 Windows Projected File System Filter Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113764 Windows Projected File System Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-96023 Windows Push Notification Core Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95881 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112755 Windows RNDIS Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP
CVE-2026-113772 Windows Redirected Drive Buffering Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-108412 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119396 Windows Remote Access API Tampering Vulnerability Important 6.5 No No 2 Tampering
CVE-2026-113843 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112751 Windows Remote Assistance Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119839 Windows Remote Desktop Client Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-108417 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No 3 Info
CVE-2026-108418 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-108419 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-121677 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-121678 Windows Remote Desktop Client Information Disclosure Vulnerability Important 5.3 No No 3 Info
CVE-2026-95908 Windows Remote Desktop Client Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-119932 Windows Remote Desktop Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-122166 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119882 Windows Remote Desktop Services Information Disclosure Vulnerability Important 5.3 No No 2 Info
CVE-2026-69327 Windows Remote Desktop Services Remote Code Execution Vulnerability Important 7.4 No No 2 RCE
CVE-2026-69565 Windows Remote Desktop Services Remote Code Execution Vulnerability Important 7 No No 2 RCE
CVE-2026-105509 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-119386 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-96081 Windows Rich Text Edit Control Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-112812 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112970 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-112971 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119870 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119988 Windows SMB Remote Code Execution Vulnerability Important 7.1 No No 2 RCE
CVE-2026-122176 Windows SMB Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-112972 Windows SMBv3 Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-119906 Windows Sandbox Elevation of Privilege Vulnerability Important No No 2 EoP
CVE-2026-112757 Windows Secure Kernel Mode Information Disclosure Vulnerability Important 6 No No 2 Info
CVE-2026-105561 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-105510 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112795 Windows Security Account Manager Denial of Service Vulnerability Important 6.5 No No 2 DoS
CVE-2026-112966 Windows Security Account Manager Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-122474 Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability Important 5.9 No No 2 SFB
CVE-2026-113842 Windows Security Center Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-88241 Windows Sensor Data Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-112989 Windows Servicing Stack Updates Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105547 Windows Setup and Deployment Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119914 Windows Setup and Deployment Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP
CVE-2026-119817 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-97013 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-102868 Windows Shell Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-105506 Windows Shell Information Disclosure Vulnerability Important 5 No No 2 Info
CVE-2026-119938 Windows Shell Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-85907 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Important 4.4 No No 2 EoP
CVE-2026-112794 Windows Smart Card Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-118144 Windows Smart Card Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-119383 Windows Smart Card Elevation of Privilege Vulnerability Important 6.6 No No 3 EoP
CVE-2026-119835 Windows Smart Card Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95968 Windows Smart Card Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105549 Windows Smart Card Information Disclosure Vulnerability Important 4.3 No No 3 Info
CVE-2026-112979 Windows State Repository Service Tampering Vulnerability Important 5.5 No No 2 Tampering
CVE-2026-95998 Windows StateRepository API Tampering Vulnerability Important 4.4 No No 2 Tampering
CVE-2026-105529 Windows Storage Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119389 Windows Storage Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-95889 Windows Storage Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-105534 Windows Storage Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-105024 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119392 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-119851 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113814 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119908 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-122475 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-119830 Windows Storport Miniport Driver Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-119885 Windows Storport Miniport Driver Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-119875 Windows Storport Miniport Driver Information Disclosure Vulnerability Important 4 No No 2 Info
CVE-2026-119823 Windows Storport Miniport Driver Remote Code Execution Vulnerability Important 6.8 No No 2 RCE
CVE-2026-119834 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119846 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-88237 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-105530 Windows System Events Broker Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-96077 Windows TCP/IP Denial of Service Vulnerability Important 7.5 No No 1 DoS
CVE-2026-96102 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96969 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112759 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7 No No 1 EoP
CVE-2026-122174 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-88233 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95894 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96053 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96845 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-108413 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-116700 Windows Telephony Service Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-119886 Windows Telephony Service Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-108408 Windows Telephony Service Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-119818 Windows Text Services Framework Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-119925 Windows Text Services Framework Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-119931 Windows Text Services Framework Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96022 Windows Text Services Framework Information Disclosure Vulnerability Important 5.6 No No 2 Info
CVE-2026-119829 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-112764 Windows USB Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119872 Windows USB Driver Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP
CVE-2026-122167 Windows USB Driver Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP
CVE-2026-95872 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96005 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96051 Windows USB Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96055 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96056 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-96057 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95902 Windows USB Hub Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95999 Windows USB Hub Driver Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-96041 Windows USB Hub Driver Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-119876 Windows USB Scanner Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-112984 Windows USB Video Driver Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP
CVE-2026-112990 Windows USB Video Driver Elevation of Privilege Vulnerability Important 4.7 No No 3 EoP
CVE-2026-95961 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95965 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-97000 Windows USM Communication Manager Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119837 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-119840 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 6.3 No No 2 EoP
CVE-2026-122984 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-122162 Windows Update Stack Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-95987 Windows User Manager Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96037 Windows User Manager Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95962 Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability Important 9 No No 2 RCE
CVE-2026-96086 Windows WLAN Service Denial of Service Vulnerability Important 6.5 No No 2 DoS
CVE-2026-105028 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-119827 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-119899 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-122170 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-108423 Windows WinHTTP Information Disclosure Vulnerability Important 4.7 No No 2 Info
CVE-2026-105589 Windows Wireless Networking Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-113760 Windows XWizard Framework Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-112801 Windows eSCL Scanner Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-95956 Windows eSCL Scanner Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-112766 Windows exFAT File System Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-112804 Windows exFAT File System Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-122177 Windows iSCSI Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-95898 Windows iSCSI Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-88231 Windows iSCSI Information Disclosure Vulnerability Important 5.7 No No 2 Info
CVE-2026-105518 Windows iSCSI Remote Code Execution Vulnerability Important 8.8 No No 2 RCE
CVE-2026-88234 Windows iSCSI Remote Code Execution Vulnerability Important 9.8 No No 2 RCE
CVE-2026-83684 Windows iSCSI Target Service Information Disclosure Vulnerability Important 7.5 No No 2 Info
CVE-2026-105522 Winlogon Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-83563 Winlogon Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-105526 Winsock Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-96994 Winsock Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-95874 Xbox Gaming Services Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-95989 vhdmp.sys Elevation of Privilege Vulnerability Important 7 No No 1 EoP

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.

 

As with last month, I’ll do my best to summarize everything else in this release but assume there are details I miss or that will be revised after the release. I’ve tried to group these into cohorts of their own.

Local Privilege Escalations: As usual, EoP is the biggest category in the release. 425 of the EoP bugs require an attacker to already be on the box, and 245 of them hand over SYSTEM or administrator privileges. That’s what makes them the second half of nearly every attack chain. None are listed as public or under active attack, but 33 are rated “Exploitation More Likely”, which is where I’d start.

The biggest cluster is the Windows Advanced Rasterization Platform, with 36 CVEs. Twenty-eight score CVSS 8.8 with a changed scope. For these cases, an attacker running a malicious app inside an AppContainer feeds crafted graphics data to an isolated compilation service and escapes the container.

Hyper-V earns eight Critical-rated EoPs. Two of them score 8.2 with a changed scope, and the first one lets an attacker reach VTL1. Windows Remote Desktop Services (CVE-2026-119957), TPM (CVE-2026-119382), and Graphics Kernel (CVE-2026-119966) make up the rest of the local Criticals. If you run Hyper-V hosts, don’t skip these.

The rest is the usual long tail: Graphics Kernel (28), Installer (32), Kernel (18), Print Spooler (14), and DWM (9), plus smaller clusters in the Audio Service, Broadcast DVR User Service, USB drivers, and LSASS. Individually, none of these will make headlines. Collectively, they’re a very large pile of ways to become SYSTEM. Rootkits, anyone?

Office-Related Bugs: Similar to last month, Office takes a big share of the release, with Word at 65 CVEs and Excel at 64. The bulk is remote code execution: 154 of the 201 are RCEs, along with 25 information disclosure bugs, 10 EoPs, and 11 spoofing bugs. Twenty-two are rated Critical. Excel has 12 of those, Word has 4, Outlook has 3, the general Office component has 2, and PowerPoint has 1. The ones to look at first are those where the Preview Pane is an attack vector, since the user never has to open the file. Ten bugs fit this description.

SharePoint Server adds 30 CVEs, and it’s a different mix from the rest of Office: 10 spoofing, 9 EoP, 7 RCE, and 3 info disclosure. The seven RCEs are mainly deserialization of untrusted data. The ones I checked need only an authenticated attacker with low-level access to send a crafted request, with no user interaction. CVE-2026-120002 is the highest score in the group at CVSS 9.9, an incorrect authorization EoP over the network. SharePoint has been a frequent target, so I wouldn’t wait for in-the-wild reports to patch.

Exchange Server: Exchange Server gets 9 bugs this month: two RCEs, four EoPs, one denial of service, and two spoofing bugs. One is Critical, and none are publicly known or exploited. The Critical RCE (8.8) needs only a low-privileged login and no user interaction, and Microsoft rates it “Exploitation More Likely”, the only Exchange bug with that rating. It’s the one I’d patch first, along with the Windows Search bug covered earlier. The other RCE (also 8.8) is rated “Exploitation Unlikely”. The four EoPs score between 7.2 and 8.8, and the DoS lands at 7.5. The spoofing bugs may seem least worrying, but these often turn into credential relaying, so don’t discount them. As always with Exchange, keep in mind that it’s a favorite target, so patch these on a faster schedule than the scores suggest. And good luck Exchange Admins. I know you’ve had a rough few months. ∠(‘-‘ )

SQL Server: SQL Server is the biggest single product in the release, with 59 bugs once you count the OLE DB and JDBC drivers. RCEs lead at 25, followed by 22 EoPs and 11 information disclosure bugs, with a few spoofing, bypass, DoS, and tampering bugs. All are Important, none are publicly known or exploited, and nearly all are rated “Exploitation Less Likely”.

Heap buffer overflows dominate the root causes at 24, followed by 11 SQL injection flaws. The top score is a 9.8 RCE that doesn’t require authentication, where an attacker who controls a network endpoint used by an integration package returns a crafted response. Many of the 8.8 RCEs need only a low-privileged login, and several need no user interaction. Most of the others are in the 7 to 8.8 range. If you run SQL Server, plan on testing and deploying these, since the volume suggests a lot of attention on the product.

Windows networking and remote access: Networking and remote access is a big group this month. EoP leads with 70 CVEs, followed by 48 RCEs, 30 information disclosure bugs, and 23 denial-of-service bugs. The one that surprised me is Kerberos. CVE-2026-85844 is an authentication bypass rated CVSS 9.8 that only gets an Important rating. According to the advisory, an unauthenticated attacker sends crafted Kerberos traffic and relays the resulting authentication to a domain controller, gaining SYSTEM on it with no user interaction. Don’t let the Important label fool you. 

DNS has 33 CVEs between the Windows DNS and DNS Server components, 10 of them RCEs. Fifteen are information disclosure bugs, and 13 of the DNS bugs score only 4.9. The DNS Server role alone has 11. Between DHCP Server (9 bugs, 4 of them RCE) and DNS, the infrastructure services most networks run on get a lot of attention.

Some of the Critical bugs need a bit more than a network connection. The Windows TCP/IP RCE and the Function Discovery SSDP Provider RCE are both use-after-free bugs reached over an adjacent network, rated 7.5. The SMB Server bug in srvnet.sys also scores 7.5, but it needs a login and a won race condition. Race conditions get beaten at Pwn2Own all the time, so I wouldn’t count on that.

The client side is worth a look too. Remote Desktop Client has 12 CVEs, including four RCEs, where an attacker hosts a malicious server and convinces a user to connect. The NFS client follows the same pattern, with two RCEs and four additional bugs. The Remote Desktop Services and Gateway components add 7 more, including one authenticated RCE.

Azure, cloud and identity: Azure and identity bugs are a small slice of the release this month, with a mere 52 in total. Four are rated Critical: Azure OpenAI, Azure Managed Grafana, and two Active Directory Domain Services bugs.

The scariest numbers belong to Azure OpenAI (9.8, missing authentication on a critical function) and two 9.9s in Microsoft Identity Manager and Azure DevOps. The Identity Manager bug is an EoP, and the DevOps one is an RCE. Cloud-service bugs often show up with big scores and nothing to deploy. Don’t assume that here. Microsoft’s data lists every one of these as “Customer Action Required: Yes”, so I’d verify each one before dismissing it. The Active Directory Domain Services pair is the one to watch for on-prem teams. One is an RCE at 8.8 and the other is a Critical EoP, and both are rated “Exploitation More Likely”.

Windows graphics, media and printing: EoP bugs dominate this group, with 163 of the 213 bugs. Another 26 are information disclosure bugs and 24 are RCEs. Only six are rated Critical: Graphic Fonts and the Raw Image Extension (both 8.8 RCEs), a Codecs Library RCE, a Print Spooler RCE, and two Graphics Kernel EoPs.

The biggest clusters are the Advanced Rasterization Platform (37), the Graphics Kernel (35), Print Spooler (20), and Desktop Window Manager (9), with the Win32K, audio, and Broadcast DVR components behind them. The scariest scores are in the media parsers, not graphics. DirectMusic, Media Foundation, and Color Management each have RCEs scoring 9.8. The 24 RCEs are spread across the Codecs Library, DirectMusic, Color Management, Media Foundation, and the XPS converter, among others. Most are on the wormable list, so look there before you triage them. The other piece worth noting is the Raw Image Extension, where a bug can fire just by viewing a folder with a malicious RAW file in it

 Windows storage file systems and drivers: EoP leads again here at about 80 bugs, followed by roughly 15 RCEs and 16 information disclosure bugs. Only one is rated Critical, an EoP in the TPM. Everything else lands at Important. The scariest scores are in the storage stack. iSCSI has a 9.8 RCE and is on the wormable list. The Storage Spaces Controller adds three more 8.8 RCEs. Windows Storage itself is the biggest component, and over half of its bugs are RCEs. The rest of the group is a long tail across NTFS, USB drivers, the Overlay Filter, Storport, the Cloud Files filter, and HID. About two dozen bugs need physical access, which is mostly the USB, HID, and BitLocker side of the group. Those are lower risk for most enterprises but matter for kiosks and shared machines.

 .NET and Visual Studio: Developer tooling is a mid-sized group this month with a paltry 44 bugs, and none of them break out of the Important rating. RCEs and security feature bypasses lead at 12 each, with denial of service (10), EoPs (6), and information disclosure (4) behind them. Visual Studio Code is the story again, with 19 bugs. Almost all of them need user interaction, typically opening something malicious. Microsoft rates two of the VS Code bugs, one RCE and one bypass, “Exploitation More Likely”, the only ones in this group with that rating. Remember that the editor sits on developer machines full of credentials and source, so I’d treat that as a priority.  The ASP.NET Core and .NET bugs are quieter. ASP.NET Core has 15 bugs, .NET has 12, split among DoS, EoP, bypass, and two RCEs. The rest are PowerShell, .NET Aspire, JScript, and a GitHub Copilot extension, in keeping with the year’s steady trickle of AI-adjacent tools.

Windows Security and identity: This is a small group, and EoP carries it with about 30 of the roughly 50 bugs. The rest is a mix of denial of service (8), information disclosure (4), security feature bypass (3), and one spoofing bug. Only one is rated Critical: an RCE in Microsoft Defender (8.8). The standout is Kerberos. It’s covered in the networking section, but I’d put it near the top of the list overall because it lets an unauthenticated attacker become SYSTEM on a domain controller. The Defender RCE also needs a closer look. It requires user interaction, but it hits the product people count on to catch the attackers. The rest is the usual: credential handling, sign-in, and firewall bugs, plus a pair of Secure Kernel Mode issues.

Microsoft Dynamics: Dynamics adds just one bug this month: an information disclosure in Dynamics 365 on-premises (6.5). It is not publicly known or exploited.

What’s left is the Windows plumbing: Installer, Kernel, Shell, and a long list of single-bug services such as Task Scheduler, WMI, Performance Counters, Event Viewer, and Sandbox. EoP leads with 51 of the roughly 120, followed by 36 information disclosure bugs, 12 RCEs, and a few tampering, bypass, and spoofing bugs. None are Critical, and none are publicly known or exploited.

No new advisories are being released this month.

Looking Ahead

The final Patch Tuesday of the year will be on December 8. Regardless of how big (or how small!) the release may be, I’ll be back to do my best to discern what you need to know. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

Zero Day Initiative-Published

11/11 TOC ZDI-26-953: (0Day) Meta FAIRChem utils load_inference_model Deserializ…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-952: (0Day) Meta FAIRChem _cli YAML File Parsing Deserializatio…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-951: (0Day) Meta FAIRChem utils load_tasks Deserialization of U…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-950: (0Day) Meta FAIRChem migrate_checkpoint Deserialization of…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-949: (0Day) Meta FAIRChem utils load_model_and_weights_from_che…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-948: (0Day) Meta FAIRChem MLIPPredictUnit Deserialization of Un…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-947: (0Day) Meta FAIRChem make_submission_file NPZ File Parsing…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-946: (0Day) Meta FAIRChem make_challenge_submission_file NPZ Fi…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-945: (0Day) Meta FAIRChem convert_fine_tune_checkpoint Deserial…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-944: (0Day) Meta fairseq load_ema_from_checkpoint Deserializati…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-943: (0Day) Meta fairseq load_checkpoint_to_cpu Deserialization…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-942: (0Day) Meta fairseq rerank Code Injection Remote Code Exec…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-941: (0Day) Meta fairseq FConvModel YAML File Parsing Code Inje…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-940: (0Day) Meta fairseq dump_km_label Deserialization of Untru…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-939: (0Day) Meta fairseq2 FileCheckpointManager _load_state_dic…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-938: (0Day) Meta fairseq parse_manifest Code Injection Remote C…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-937: (0Day) Meta fairseq quantize_with_kmeans Deserialization o…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-936: (0Day) Meta fairseq FairseqCPUAdam YAML File Parsing Code …
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-935: (0Day) Meta fairseq FConvModelSelfAtt YAML File Parsing Co…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-934: (0Day) Meta fairseq FConvLanguageModel YAML File Parsing C…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-933: (0Day) Meta fairseq MultiresHubertModel YAML File Parsing …
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-932: (0Day) Meta fairseq CtcCriterion YAML File Parsing Code In…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-931: (0Day) Meta fairseq AudioModalityConfig YAML File Parsing …
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-930: (0Day) Meta fairseq LightConvLanguageModel YAML File Parsi…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-929: (0Day) Meta fairseq FairseqAdamax YAML File Parsing Code I…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-928: (0Day) Meta fairseq W2lConvGluEncoder YAML File Parsing Co…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-927: (0Day) Meta fairseq FairseqAdam YAML File Parsing Code Inj…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-926: (0Day) Meta fairseq RawAudioDataset YAML File Parsing Code…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-925: (0Day) Meta fairseq FairseqLAMB YAML File Parsing Code Inj…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-924: (0Day) Meta fairseq S2TWavTransformerEncoder YAML File Par…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-923: (0Day) Meta fairseq HubertModel YAML File Parsing Code Inj…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-922: (0Day) Meta fairseq Wav2Vec2Model YAML File Parsing Code I…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-921: (0Day) Meta fairseq TransformerLanguageModel YAML File Par…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-920: (0Day) Meta fairseq Data2VecAudioModel YAML File Parsing C…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-919: (0Day) Meta fairseq FairseqAdafactor YAML File Parsing Cod…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-918: (0Day) Meta fairseq VGGTransformerModel YAML File Parsing …
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-917: (0Day) Meta fairseq load_speaker Code Injection Remote Cod…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-916: (0Day) Meta fairseq split_by_lang Code Injection Remote Co…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-915: (0Day) Meta fairseq FilterNamesDataset Code Injection Remo…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-914: (0Day) Meta fairseq Wav2VecModel YAML File Parsing Code In…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote …
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta fairseq. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-912: (0Day) Meta Detectron2 detection_checkpoint Deserializatio…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta Detectron2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-911: (0Day) Meta Detectron2 DensePose Deserialization of Untrus…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta Detectron2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-910: (0Day) Meta Detectron2 LazyConfig Deserialization of Untru…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta Detectron2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-909: (0Day) Meta Detectron2 CfgNode.merge_from_file Deserializa…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta Detectron2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-908: (0Day) Meta Detectron2 load_proposals_into_dataset Deseria…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta Detectron2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/11 TOC ZDI-26-907: (0Day) Meta Detectron2 vertex_feature_embedder Deserializa…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta Detectron2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
11/10 TOC ZDI-26-906: X.Org Server libX11 XkbGetMap Reply Heap-based Buffer Over…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of X.Org Server. User interaction is required to exploit this vulnerability in that the target must connect to a malicious X11 server. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-88806.
11/10 TOC ZDI-26-905: X.Org Server libXrender RenderQueryPictFormats Reply Heap-…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of X.Org Server. User interaction is required to exploit this vulnerability in that the target must connect to a malicious X11 server. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-88807.
11/10 TOC ZDI-26-904: NVIDIA Megatron-LM Checkpoint Deserialization of Untrusted…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron-LM. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-65110.
11/10 TOC ZDI-26-903: X.Org Server Font Alias Resolution Heap-based Buffer Overf…
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50256.
11/10 TOC ZDI-26-902: X.Org Server XkbResizeKeySyms Integer Overflow Privilege E…
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50258.
11/10 TOC ZDI-26-901: X.Org Server ProcDRI2GetBuffers Heap-based Buffer Overflow…
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50264.
11/10 TOC ZDI-26-900: Wireshark SMB Object Export Integer Overflow Remote Code E…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. User interaction is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.
11/10 TOC ZDI-26-899: Wireshark LBMC Fragment Reassembly Integer Overflow Remote…
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. Authentication is not required to exploit this vulnerability. However, only instances with LBMC fragment reassembly enabled are vulnerable. The ZDI has assigned a CVSS rating of 7.5.
11/10 TOC ZDI-26-898: Wireshark LoRaWAN Decryption Numeric Truncation Error Remo…
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wireshark. Authentication is not required to exploit this vulnerability. However, only instances with LoRaWAN decryption enabled are vulnerable. The ZDI has assigned a CVSS rating of 7.1.

Microsoft-Threat Protection

11/11 TOC Catch Microsoft Defender and Sentinel at Ignite 2026

Join us at Microsoft Ignite 2026, November 17 to 20, in San Francisco and online. Find the Defender and Sentinel sessions that fit your role, and what you will take away from each. Times are Pacific (PT).

1. Start here

If you only catch one session, make it this one.

BRK324: The Alert Is Dead. The Blueprint for the Agentic SOC

Wed, Nov 18, 9:00 to 9:45 AM PT | Moscone West, Level 3, Room 3014 | Level 200

The blueprint for the Agentic SOC: how humans and AI split the work, and what changes in your architecture.

Speakers: Rob Lefferts, CVP, Defender; Amir Gharib, Principal Security Researcher; Allie Mellen, Principal Strategist

Session details and RSVP

2. Breakouts in detail

2.1 BRK316: Winning the Race Against Time with Autonomous Protection

Wed, Nov 18, 11:30 AM to 12:15 PM PT | Moscone West, Level 2, Room 2001 | Level 400

Deep dive for experienced defenders on autonomous protection as the gap between discovery and exploitation shrinks.

Speakers: Noam Hadash, Raviv Tamir, Ken Robb   Session details and RSVP

2.2 BRK320: Agentic Security Unfiltered with Allie Mellen: Hype vs. Reality

Wed, Nov 18, 3:00 to 3:45 PM PT | Moscone West, Level 2, Room 2014 | Level 200

For CISOs and IT leaders weighing agents: where they can safely automate, where they break change controls, and what guardrails to set.

Speakers: Tanmay Ganacharya, Kim Kischel, Raviv Tamir, Allie Mellen   Session details and RSVP

2.3 BRK321: Threat Intelligence reimagined: From signals to protection at AI speed

Thu, Nov 19, 9:00 to 9:45 AM PT | Moscone West, Level 3, Room 3006 | Level 200

Turn threat intelligence into action with expert research and AI automation. Includes demos.

Speakers: Tanmay Ganacharya, Yoni Nave   Session details and RSVP

2.4 BRK332: Identity Knows What Your SOC Doesn’t: Stop Threats Faster Together

Thu, Nov 19, 4:00 to 4:45 PM PT | Moscone West, Level 2, Room 2009 | Level 300

How Entra and Defender bring identity risk signals into SOC investigations. Shared with the Entra team.

Speakers: Etan Basseri, Martin Schvartzman, Yair Tor   Session details and RSVP

2.5 BRK340: A Zero Trust approach to securing AI runtime with Microsoft Defender

Thu, Nov 19, 5:15 to 6:00 PM PT | Marriott Marquis, Lower B2, Yerba Buena Salon 9 | Level 200

How Defender applies Zero Trust to AI agents and stops prompt injection, tool misuse and identity abuse, mapped to OWASP and MITRE.

Speakers: James Brotsos, Krishna Sunkavalli   Session details and RSVP

2.6 BRK333: How Threat Research Powers Attack Disruption in the AI Era

Fri, Nov 20, 9:00 to 9:45 AM PT | Moscone West, Level 3, Room 3006 | Level 300

See how real attacks become protection through the unified security graph, attack disruption and built in agents.

Speakers: Caroline Lee, Shachaf Levy, Jaime Coll   Session details and RSVP

2.7 BRK334: Modern Phishing Doesn’t End at the Click

Fri, Nov 20, 11:30 AM to 12:15 PM PT | Moscone West, Level 3, Room 3006 | Level 300

How identity, email and collaboration security work together against AI powered phishing. Shared with the Entra team.

Speakers: Cristian Craioveanu, Ankur Patel, Sangeeta Ranjit   Session details and RSVP

3. Pick your path

 

1. SOC leader or CISO

2. SOC analyst or engineer

3. Threat intelligence

Catch these

BRK324

BRK320

BRK317

THR876

BRK316

BRK340

LTG1230

LTG1227

BRK333

BRK321

LTG1229

Why

Set direction: the blueprint, agent guardrails, frontline lessons, E5 value

Go deep: autonomous protection, AI runtime defense, data, attack disruption

See how research becomes protection

4. Day by day

Theater sessions and lightning talks are in person only

#

Time

Code

Session

Format

Where

4.1

Tue, Nov 17

4:05 to 4:30 PM PT

THR876

Get ready for AI with the E5 you already own

Theater

Moscone South, The Hub, Theater C

4.2

Wed, Nov 18

9:00 to 9:45 AM PT

BRK324

The Alert Is Dead. The Blueprint for the Agentic SOC

Breakout

Moscone West, Level 3, Room 3014

4.3

Wed, Nov 18

9:00 to 9:25 AM PT

THR1016

BlueVoyant Perspective on ISOC

Theater

Moscone South, The Hub, Theater G

4.4

Wed, Nov 18

11:30 AM to 12:15 PM PT

BRK316

Winning the Race Against Time with Autonomous Protection

Breakout

Moscone West, Level 2, Room 2001

4.5

Wed, Nov 18

12:15 to 12:30 PM PT

LTG1230

Fuel the agentic SOC with comprehensive security data

Lightning Talk

Moscone South, The Hub, Lightning Talk 9

4.6

Wed, Nov 18

2:35 to 2:50 PM PT

LTG1375

Boosting Your SOC with Microsoft Sentinel Data Lake & Security Copilot

Lightning Talk

Moscone South, The Hub, Lightning Talk 4

4.7

Wed, Nov 18

3:00 to 3:45 PM PT

BRK320

Agentic Security Unfiltered with Allie Mellen: Hype vs. Reality

Breakout

Moscone West, Level 2, Room 2014

4.8

Thu, Nov 19

9:00 to 9:45 AM PT

BRK321

Threat Intelligence reimagined: From signals to protection at AI speed

Breakout

Moscone West, Level 3, Room 3006

4.9

Thu, Nov 19

10:15 to 10:30 AM PT

LTG1375

Boosting Your SOC with Microsoft Sentinel Data Lake & Security Copilot

Lightning Talk

Moscone South, The Hub, Lightning Talk 7

4.10

Thu, Nov 19

2:10 to 2:25 PM PT

LTG1227

Why Every SOC Needs attack disruption

Lightning Talk

Moscone South, The Hub, Lightning Talk 6

4.11

Thu, Nov 19

2:45 to 3:30 PM PT

BRK317

What the Frontlines Reveal About Modern Security

Breakout

Moscone West, Level 3, Room 3005

4.12

Thu, Nov 19

4:00 to 4:45 PM PT

BRK332

Identity Knows What Your SOC Doesn’t: Stop Threats Faster Together

Breakout

Moscone West, Level 2, Room 2009

4.13

Thu, Nov 19

4:15 to 4:30 PM PT

LTG1229

Threat Intelligence reimagined: Expert Q&A and Deep Dive

Lightning Talk

Moscone South, The Hub, Lightning Talk 1

4.14

Thu, Nov 19

5:15 to 6:00 PM PT

BRK340

A Zero Trust approach to securing AI runtime with Microsoft Defender

Breakout

Marriott Marquis, Lower B2, Yerba Buena Salon 9

4.15

Fri, Nov 20

9:00 to 9:45 AM PT

BRK333

How Threat Research Powers Attack Disruption in the AI Era

Breakout

Moscone West, Level 3, Room 3006

4.16

Fri, Nov 20

11:30 AM to 12:15 PM PT

BRK334

Modern Phishing Doesn’t End at the Click

Breakout

Moscone West, Level 3, Room 3006

5. Resources

  • Can’t be there? Breakouts will be recorded and available on demand. Recording links will be added here after Ignite.
  • Visit us: Stop by the Microsoft Security and Agent 365 Neighborhood at Moscone Center to meet the team.
  • Ignite session catalog

Veeam

11/11 TOC Avoiding Unplanned Reboots and Service Restarts When Upgrading Veeam A…
Upgrading Veeam ONE can restart connected Windows-based Veeam Backup & Replication servers, including those with the Veeam Plug-In for Google Cloud. This article explains how to prevent the restart.


Content on this page is collected from remote sources by IPWorX but is not created by IPWorX. The contents belong to the creators and should be considered theirs for all legal purposes, we have no editorial control or responsibility over them. IPWorX does not represent or endorse the accuracy or reliability of any opinion, statement, or other information provided by any third party.

This page contains links to third-party websites. These links are provided solely for your convenience. IPWorX does not control, maintain, or endorse the content, accuracy, or reliability of any third-party resources, and you access them at your own risk.

Scripts and tools to help manage your network found, managed and
happily shared with documentation on usage at the IP WORk eXchange.
https://www.IPWorX.com